PT-2019-5839 · Openssh+1 · Openssh+1

Adam Zabrocki

·

Published

2019-10-09

·

Updated

2026-03-10

·

CVE-2019-16905

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenSSH versions 7.7 through 7.9 OpenSSH versions 8.x before 8.1
Description The issue is caused by an integer overflow in the XMSS key parsing algorithm, leading to memory corruption and local code execution. This occurs when OpenSSH is compiled with an experimental key type and a client or server is configured to use a crafted XMSS key. The XMSS implementation is considered experimental in all released OpenSSH versions.
Recommendations For OpenSSH versions 7.7 through 7.9, consider disabling the experimental XMSS key type until a patch is available. For OpenSSH versions 8.x before 8.1, consider disabling the experimental XMSS key type until a patch is available. As a temporary workaround, avoid using the crafted XMSS key in the affected OpenSSH versions.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2024-3921
ALT-PU-2024-4077
ALT-PU-2024-4467
ALT-PU-2024-9513
BDU:2021-03382
CVE-2019-16905

Affected Products

Alt Linux
Openssh