Remote Denial of Service Vulnerability in OpenSSH by OpenBSD
CVE-2016-10708
7.5HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2016-10708?
The OpenSSH daemon (sshd) prior to version 7.4 is susceptible to a remote denial of service vulnerability. This arises when an attacker sends an out-of-sequence NEWKEYS message, causing a NULL pointer dereference, which results in the daemon crashing. This vulnerability could potentially disrupt service availability for users relying on SSH connections, emphasizing the importance of timely updates and security patches.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.