GCVE - cpe:2.3:a:openbsd:openssh:5.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openbsd:openssh:5.8:*:*:*:*:*:*:*

part: a version: 5.8 update: *

Vendor	Openbsd (`932cdfc2-94b9-5fb6-8ef3-d0b271f414b5`)
Product	Openssh (`00fc4953-faf7-5f04-8d3d-4edd44206199`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openssh/openssh-portable`	purl2cpe	2026-06-01 10:17:38.304340
`pkg:mindrot/openss`	purl2cpe	2026-06-01 10:17:38.304342
`pkg:openbsd/openssh`	purl2cpe	2026-06-01 10:17:38.304343
`pkg:rpm/fedora/openssh`	purl2cpe	2026-06-01 10:17:38.304344
`pkg:rpm/opensuse/openssh`	purl2cpe	2026-06-01 10:17:38.304346

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-0778`	vulnerable	2026-06-08 05:07:16.232266	Details available The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings. Published: 2016-01-14T00:00:00.000Z Updated: 2026-05-29T20:28:32.960Z Open on db.gcve.eu Reference links https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/ http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0777`	vulnerable	2026-06-08 05:07:16.215180	Details available The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key. Published: 2016-01-14T00:00:00.000Z Updated: 2026-05-29T20:30:01.702Z Open on db.gcve.eu Reference links https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/ http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5107`	vulnerable	2026-06-08 04:56:32.278076	Details available The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. Published: 2013-03-07T20:00:00.000Z Updated: 2026-05-29T20:32:32.155Z Open on db.gcve.eu Reference links http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234 http://rhn.redhat.com/errata/RHSA-2013-1591.html http://marc.info/?l=bugtraq&m=144050155601375&w=2 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?r1=1.89#rev1.89 https://bugzilla.redhat.com/show_bug.cgi?id=908707	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.