PT-2019-5839 · Openssh+1 · Openssh+1
Adam Zabrocki
·
Publicado
2019-10-09
·
Atualizado
2026-03-10
·
CVE-2019-16905
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions 7.7 through 7.9
OpenSSH versions 8.x before 8.1
Description
The issue is caused by an integer overflow in the XMSS key parsing algorithm, leading to memory corruption and local code execution. This occurs when OpenSSH is compiled with an experimental key type and a client or server is configured to use a crafted XMSS key. The XMSS implementation is considered experimental in all released OpenSSH versions.
Recommendations
For OpenSSH versions 7.7 through 7.9, consider disabling the experimental XMSS key type until a patch is available.
For OpenSSH versions 8.x before 8.1, consider disabling the experimental XMSS key type until a patch is available.
As a temporary workaround, avoid using the crafted XMSS key in the affected OpenSSH versions.
Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Openssh