QSearchQSearch

CVE-2016-0777

6.5 MEDIUM

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sen...

Published: 2016-01-14 · Last updated: 2026-05-29

Severity and scoring

CVSS
6.5 MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-200

Affected products

VendorProduct
applelinux, mac_os_x, openssh
hplinux, mac_os_x, openssh
openbsdlinux, mac_os_x, openssh
oraclelinux, mac_os_x, openssh
sophoslinux, mac_os_x, openssh

Description

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2022-48575 — A person with access to a Mac may be able to bypass Login Window (3.5 LOW)
  • CVE-2022-26758 — A malicious application may cause unexpected changes in memory shared between processes (7.1 HIGH)
  • CVE-2026-46843 — Vulnerability in Oracle REST Data Services (component: Core) (5.3 MEDIUM)
  • CVE-2026-46842 — Vulnerability in Oracle REST Data Services (component: Core) (5.3 MEDIUM)
  • CVE-2026-46841 — Vulnerability in Oracle REST Data Services (component: General) (5.3 MEDIUM)

Same CWE

  • CVE-2026-47177 — Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support
  • CVE-2026-47176 — Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support
  • CVE-2026-44486 — Axios is a promise based HTTP client for the browser and Node.js (7.5 HIGH)
  • CVE-2026-53912 — Cerebrate before version 1.37 exposed credential material from self-registration requests
  • CVE-2026-49219 — ImageMagick is free and open-source software used for editing and manipulating digital images (5.5 MEDIUM)