CVE-2016-10011
- State
- Published
- Severity
- 6.2 Medium
- Published
- Jan 5, 2017
- Updated
- May 29, 2026
- Reserved
- Dec 19, 2016
Description
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://security.netapp.com/advisory/ntap-20171130-0002/
- [oss-security] 20161219 Announce: OpenSSH 7.4 releasedmailing-list
- 1037490vdb-entry
- https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
- RHSA-2017:2029vendor-advisory
- [debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security updatemailing-list
- 94977vdb-entry
- https://www.openssh.com/txt/release-7.4
- https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.