QSearchQSearch

CVE-2016-0778

8.1 HIGH

The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when ce...

Published: 2016-01-14 · Last updated: 2026-05-29

Severity and scoring

CVSS
8.1 HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-119

Affected products

VendorProduct
applelinux, mac_os_x, openssh
hplinux, mac_os_x, openssh
openbsdlinux, mac_os_x, openssh
oraclelinux, mac_os_x, openssh
sophoslinux, mac_os_x, openssh

Description

The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2022-48575 — A person with access to a Mac may be able to bypass Login Window (3.5 LOW)
  • CVE-2022-26758 — A malicious application may cause unexpected changes in memory shared between processes (7.1 HIGH)
  • CVE-2026-46843 — Vulnerability in Oracle REST Data Services (component: Core) (5.3 MEDIUM)
  • CVE-2026-46842 — Vulnerability in Oracle REST Data Services (component: Core) (5.3 MEDIUM)
  • CVE-2026-46841 — Vulnerability in Oracle REST Data Services (component: General) (5.3 MEDIUM)

Same CWE

  • CVE-2026-0409 — A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Intern...
  • CVE-2026-11623 — A security vulnerability has been detected in tmux up to 3.6a (4.5 MEDIUM)
  • CVE-2026-11557 — A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9 (8.8 HIGH)
  • CVE-2026-11553 — A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon (8.8 HIGH)
  • CVE-2026-11528 — A vulnerability was found in Tenda AC18 15.03.05.05 (8.8 HIGH)