OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities

Bugtraq ID:	102780
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2016-10708
Remote:	Yes
Local:	No
Published:	Jan 21 2018 12:00AM
Updated:	Jan 21 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	OpenSSH OpenSSH 4.2 OpenSSH OpenSSH 4.1 p1 OpenSSH OpenSSH 4.1 OpenSSH OpenSSH 4.0 p1 OpenSSH OpenSSH 4.0 OpenSSH OpenSSH 3.9 p1 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 OpenSSH OpenSSH 3.8.1 p1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 OpenSSH OpenSSH 3.8 p1 OpenSSH OpenSSH 3.7.2 p1 OpenSSH OpenSSH 3.7.1 p2 OpenSSH OpenSSH 3.7.1 p1 + SCO Open Server 5.0.7 OpenSSH OpenSSH 3.7.1 OpenSSH OpenSSH 3.7 p1 OpenSSH OpenSSH 3.7 .1p2 OpenSSH OpenSSH 3.7 OpenSSH OpenSSH 3.6.1 p2 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Trustix Secure Linux 2.0 OpenSSH OpenSSH 3.6.1 p1 + OpenPKG OpenPKG Current + Slackware Linux 9.0 + Slackware Linux -current OpenSSH OpenSSH 3.6.1 + Novell Netware 6.5 OpenSSH OpenSSH 3.5 p1 OpenSSH OpenSSH 3.5 OpenSSH OpenSSH 3.4 p1-7 OpenSSH OpenSSH 3.4 p1-6 OpenSSH OpenSSH 3.4 p1-5 OpenSSH OpenSSH 3.4 p1-4 OpenSSH OpenSSH 3.4 p1-3 OpenSSH OpenSSH 3.4 p1-2 OpenSSH OpenSSH 3.4 p1-1 OpenSSH OpenSSH 3.4 p1 + Conectiva Linux Enterprise Edition 1.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + FreeBSD FreeBSD 5.0 + FreeBSD FreeBSD 4.7 -RELEASE + FreeBSD FreeBSD 4.7 + IBM AIX 5.1 L + IBM AIX 4.3.3 + Immunix Immunix OS 7+ + Redhat Linux 8.0 + Slackware Linux 8.1 + SuSE Linux 8.1 + SuSE Linux 8.0 OpenSSH OpenSSH 3.4 OpenSSH OpenSSH 3.3 p1 OpenSSH OpenSSH 3.3 + Openwall Openwall GNU/*/Linux (Owl)-current OpenSSH OpenSSH 3.2.3 p1 OpenSSH OpenSSH 3.2.2 p1 + Apple Mac OS X 10.1.5 + Apple Mac OS X 10.1.4 + Apple Mac OS X 10.1.3 + Apple Mac OS X 10.1.2 + Apple Mac OS X 10.1.1 + Apple Mac OS X 10.1 + Apple Mac OS X 10.1 + Apple Mac OS X 10.0.4 + Apple Mac OS X 10.0.3 + Apple Mac OS X 10.0.2 + Apple Mac OS X 10.0.1 + Apple Mac OS X 10.0 OpenSSH OpenSSH 3.2 + OpenBSD OpenBSD 3.1 OpenSSH OpenSSH 3.1 p1 + Juniper NetScreen-IDP 10 3.0 r2 + Juniper NetScreen-IDP 10 3.0 r1 + Juniper NetScreen-IDP 10 3.0 + Juniper NetScreen-IDP 100 3.0 r2 + Juniper NetScreen-IDP 100 3.0 r1 + Juniper NetScreen-IDP 100 3.0 + Juniper NetScreen-IDP 1000 3.0 r2 + Juniper NetScreen-IDP 1000 3.0 r1 + Juniper NetScreen-IDP 1000 3.0 + Juniper NetScreen-IDP 500 3.0 r2 + Juniper NetScreen-IDP 500 3.0 r1 + Juniper NetScreen-IDP 500 3.0 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 + Redhat Linux 7.3 + Redhat Linux 7.2 + Redhat Linux 7.1 + Redhat Linux for iSeries 7.1 + Redhat Linux for pSeries 7.1 + Slackware Linux 8.1 + Sun Linux 5.0.7 + Sun Solaris 9 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 OpenSSH OpenSSH 3.1 OpenSSH OpenSSH 3.0.2 p1 OpenSSH OpenSSH 3.0.2 - Debian Linux 3.0 + FreeBSD FreeBSD 4.5 -STABLEpre2002-03-07 + FreeBSD FreeBSD 4.5 -RELEASE + OpenPKG OpenPKG 1.0 + Openwall Openwall GNU/*/Linux 0.1 -stable + SuSE Linux 8.0 OpenSSH OpenSSH 3.0.1 p1 OpenSSH OpenSSH 3.0.1 OpenSSH OpenSSH 3.0 p1 OpenSSH OpenSSH 3.0 OpenSSH OpenSSH 2.9.9 + NetBSD NetBSD 1.5.2 + SuSE Linux 7.3 sparc + SuSE Linux 7.3 ppc + SuSE Linux 7.3 i386 + SuSE Linux 7.2 OpenSSH OpenSSH 2.9 p2 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1.1 + Caldera OpenLinux Workstation 3.1 + FreeBSD FreeBSD 4.4 -RELENG + HP Secure OS software for Linux 1.0 + Immunix Immunix OS 7.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Redhat Linux 7.2 + Redhat Linux 7.1 + Redhat Linux 7.0 + Sun Cobalt RaQ 550 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha OpenSSH OpenSSH 2.9 p1 - IBM AIX 4.3.3 - IBM AIX 4.3.2 - IBM AIX 4.3.1 - IBM AIX 4.3 OpenSSH OpenSSH 2.9 + FreeBSD FreeBSD 4.6 -RELEASE + FreeBSD FreeBSD 4.6 + FreeBSD FreeBSD 4.5 -RELEASE + FreeBSD FreeBSD 4.5 OpenSSH OpenSSH 2.5.2 OpenSSH OpenSSH 2.5.1 OpenSSH OpenSSH 2.5 OpenSSH OpenSSH 2.3 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha OpenSSH OpenSSH 2.2 .0p1 OpenSSH OpenSSH 2.2 + NetBSD NetBSD 1.5 OpenSSH OpenSSH 2.1.1 + SuSE Linux 7.0 sparc + SuSE Linux 7.0 ppc + SuSE Linux 7.0 i386 + SuSE Linux 7.0 alpha OpenSSH OpenSSH 2.1 OpenSSH OpenSSH 1.2.3 + Blue Coat Systems Security Gateway OS 2.1.5001 SP1 OpenSSH OpenSSH 1.2.2 OpenSSH OpenSSH 7.3 OpenSSH OpenSSH 7.2p2 OpenSSH OpenSSH 7.2 OpenSSH OpenSSH 7.1p2 OpenSSH OpenSSH 7.1p1 OpenSSH OpenSSH 7.1 OpenSSH OpenSSH 7.0 OpenSSH OpenSSH 6.9p1 OpenSSH OpenSSH 6.9 OpenSSH OpenSSH 6.8 OpenSSH OpenSSH 6.7 + NetBSD NetBSD 1.5.1 + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Firewall on CD + S.u.S.E. Linux Live-CD for Firewall + S.u.S.E. SuSE eMail Server III - SCO Open Server 5.0.6 a - SCO Open Server 5.0.6 - SCO Open Server 5.0.5 - SCO Open Server 5.0.4 - SCO Open Server 5.0.3 - SCO Open Server 5.0.2 - SCO Open Server 5.0.1 - SCO Open Server 5.0 + SuSE Linux 7.3 + SuSE Linux 7.2 + SuSE Linux 7.1 + SuSE SUSE Linux Enterprise Server 7 OpenSSH OpenSSH 6.6 OpenSSH OpenSSH 6.5 OpenSSH OpenSSH 6.4 OpenSSH OpenSSH 6.3 OpenSSH OpenSSH 6.2p2 OpenSSH OpenSSH 6.2p1 OpenSSH OpenSSH 6.2 OpenSSH OpenSSH 6.1 OpenSSH OpenSSH 6.0 OpenSSH OpenSSH 5.8 p2 OpenSSH OpenSSH 5.8 OpenSSH OpenSSH 5.7 OpenSSH OpenSSH 5.6p1 OpenSSH OpenSSH 5.6 OpenSSH OpenSSH 5.5 OpenSSH OpenSSH 5.4 OpenSSH OpenSSH 5.3 OpenSSH OpenSSH 5.2p1 OpenSSH OpenSSH 5.2 OpenSSH OpenSSH 5.1 OpenSSH OpenSSH 5.0p1 OpenSSH OpenSSH 5.0 OpenSSH OpenSSH 4.9 OpenSSH OpenSSH 4.8 OpenSSH OpenSSH 4.7p1 OpenSSH OpenSSH 4.7 OpenSSH OpenSSH 4.6p1 OpenSSH OpenSSH 4.6 OpenSSH OpenSSH 4.5 OpenSSH OpenSSH 4.4.p1 OpenSSH OpenSSH 4.4 OpenSSH OpenSSH 4.3p2 OpenSSH OpenSSH 4.3p1 OpenSSH OpenSSH 4.3.0 OpenSSH OpenSSH 4.2p1 OpenSSH OpenSSH 1.127 OpenSSH OpenSSH 1.126
Not Vulnerable:	OpenSSH OpenSSH 7.4

OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities

OpenSSH is prone to multiple denial-of-service vulnerabilities.

An attacker can leverage these issues to crash the affected application, denying service to legitimate users.

Versions prior to OpenSSH 7.4 are vulnerable.

OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities

References:

• Fuzzing TCP servers (swiecki.net)
  
• OpenSSH Homepage (OpenSSH)
  
• upstream commit (mindrot.org)
  
• Bug 1537929 - (CVE-2016-10708) CVE-2016-10708 openssh: Out of sequence NEWKEYS (Redhat)
  
• OpenSSH Release Notes (OpenSSH)
  
• CVE-2016-10708 (Redhat)