CVE-2016-8858 PUBLISHED

The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."

EPSS 27.13% · 96.3th percentile

Risk Scores

EPSS Score
27.13%
96.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSopenssh0, 1:6.2p2-6, 1:6.2p2-6ubuntu1
Ubuntu:Pro:16.04:LTSopenssh0, 1:6.9p1-2, 1:6.9p1-3

Timeline

References

Open in Interactive Console →