PT-2016-3241 · Openssh+7 · Openssh+7
Kashinath T
·
Publicado
2016-03-09
·
Atualizado
2025-09-29
·
CVE-2016-6515
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 7.3
Description
The issue is related to the
auth password function in auth-passwd.c in sshd, which does not limit password lengths for password authentication. This allows remote attackers to cause a denial of service (consumption of CPU resources) via a long string.Recommendations
For OpenSSH versions prior to 7.3, consider updating to version 7.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of long password strings to minimize the risk of exploitation.
Exploit
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Freebsd
Ibm Aix
Openssh
Red Hat
Suse
Ubuntu