OpenSSH Multiple Vulnerabilities

Last Update Date: 15 Jan 2016 10:12 Release Date: 15 Jan 2016 3530 Views

RISK: High Risk

TYPE: Servers - Other Servers

Two vulnerabilities were identified in OpenSSH. A remote authenticated server can obtain potentially sensitive information from OpenSSH client memory on the target system or potentially execute arbitrary code on the target client system.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

Version 5.4 - 7.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 7.1(p2)

Vulnerability Identifier

CVE-2016-0777
CVE-2016-0778

Source

SecurityTracker