OpenBSD OpenSSH 7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:openbsd:openssh:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Openbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5) |
|---|---|
| Product | Openssh (00fc4953-faf7-5f04-8d3d-4edd44206199) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openssh/openssh-portable |
purl2cpe | 2026-06-01 10:17:38.304623 |
pkg:mindrot/openss |
purl2cpe | 2026-06-01 10:17:38.304624 |
pkg:openbsd/openssh |
purl2cpe | 2026-06-01 10:17:38.304626 |
pkg:rpm/fedora/openssh |
purl2cpe | 2026-06-01 10:17:38.304627 |
pkg:rpm/opensuse/openssh |
purl2cpe | 2026-06-01 10:17:38.304629 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-8858 |
vulnerable | 2026-06-08 05:08:21.935702 |
Details available
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
Published: 2016-12-09T00:00:00.000Z
Updated: 2026-05-29T20:45:20.720Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1907 |
vulnerable | 2026-06-08 05:07:32.279902 |
Details available
The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.
Published: 2016-01-19T00:00:00.000Z
Updated: 2024-08-05T23:10:39.956Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0778 |
vulnerable | 2026-06-08 05:07:16.232679 |
Details available
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
Published: 2016-01-14T00:00:00.000Z
Updated: 2026-05-29T20:28:32.960Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0777 |
vulnerable | 2026-06-08 05:07:16.228949 |
Details available
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
Published: 2016-01-14T00:00:00.000Z
Updated: 2026-05-29T20:30:01.702Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.