VDB
BDU%3A2019-01914
BDU%3A2019-01914
PUBLISHED
CVSS 4.599999904632568 MEDIUM
Уязвимость функций roaming_read и roaming_write средства криптографической защиты OpenSSH, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
4.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Fedora Project, Сообщество свободного программного обеспечения, Oracle Corp., Apple Inc., OpenBSD Project, HP Inc. | Ubuntu, Fedora, Debian GNU/Linux, Solaris, OS X, OpenSSH, Oracle Linux, HPE Insight Control, HPE Systems Insight Manager, HPE Matrix Operating Environment | |
| Canonical Ltd., Fedora Project, Сообщество свободного программного обеспечения, Oracle Corp., Apple Inc., The OpenBSD Project, HP Inc. | Ubuntu, Fedora, Debian GNU/Linux, Solaris, OS X, OpenSSH, Oracle Linux, HPE Insight Control, HPE Systems Insight Manager, HPE Matrix Operating Environment |
Timeline
- May 31, 2019 CVE Published
- Jun 1, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734 url
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html url
- http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html url
- http://seclists.org/fulldisclosure/2016/Jan/44 url
- http://www.debian.org/security/2016/dsa-3446 url
- http://www.openssh.com/txt/release-7.1p2 advisory
- http://www.openwall.com/lists/oss-security/2016/01/14/7 url
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html url
- http://www.securityfocus.com/archive/1/537295/100/0/threaded url
- http://www.securityfocus.com/bid/80698 url
- http://www.ubuntu.com/usn/USN-2869-1 url
…and 9 more