{"id":"CVE-2016-0777","details":"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.","modified":"2026-07-08T05:45:52.417625554Z","published":"2016-01-14T22:59:01.140Z","related":["SUSE-SU-2016:0117-1","SUSE-SU-2016:0118-1","SUSE-SU-2016:0119-1","SUSE-SU-2016:0120-1","openSUSE-SU-2024:10174-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"10.11.3"}],"source":"CPE_RANGE","vendor_product":"apple:mac_os_x"},{"vendor_product":"hp:remote_device_access_virtual_customer_access_system","cpes":["cpe:2.3:a:hp:remote_device_access_virtual_customer_access_system:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"15.07"}],"source":"CPE_RANGE"},{"source":"CPE_STRING","vendor_product":"openbsd:openssh","cpes":["cpe:2.3:a:openbsd:openssh:5.8:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.2:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:7.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.8"},{"last_affected":"5.8"},{"introduced":"6.2"},{"last_affected":"6.2"},{"introduced":"7.1"},{"last_affected":"7.1"}]},{"vendor_product":"oracle:linux","cpes":["cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7"},{"last_affected":"7"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.3"},{"last_affected":"11.3"}],"source":"CPE_STRING","vendor_product":"oracle:solaris"},{"source":"CPE_STRING","vendor_product":"sophos:unified_threat_management_software","cpes":["cpe:2.3:a:sophos:unified_threat_management_software:9.318:*:*:*:*:*:*:*","cpe:2.3:a:sophos:unified_threat_management_software:9.353:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.318"},{"last_affected":"9.318"},{"introduced":"9.353"},{"last_affected":"9.353"}]}]},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"},{"type":"ADVISORY","url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734"},{"type":"ADVISORY","url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2016/Jan/44"},{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3446"},{"type":"ADVISORY","url":"http://www.openssh.com/txt/release-7.1p2"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/01/14/7"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/archive/1/537295/100/0/threaded"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/80695"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1034671"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2869-1"},{"type":"ADVISORY","url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/"},{"type":"ADVISORY","url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/"},{"type":"ADVISORY","url":"https://bto.bluecoat.com/security-advisory/sa109"},{"type":"ADVISORY","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375"},{"type":"ADVISORY","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388"},{"type":"ADVISORY","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"},{"type":"ADVISORY","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"},{"type":"ADVISORY","url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201601-01"},{"type":"ADVISORY","url":"https://support.apple.com/HT206167"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openssh/openssh-portable","events":[{"introduced":"79a1bc918ffd2e81b5bd39cfdf87dfc81390fbb5"},{"last_affected":"e91346dc2bbf460246df2ab591b7613908c1b0ad"}],"database_specific":{"cpe":["cpe:2.3:a:openbsd:openssh:5.0:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.1:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.1:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.2:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.2:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.3:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.3:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.4:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.4:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.5:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.5:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.6:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.6:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.7:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.7:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.8:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.9:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:5.9:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.0:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.0:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.1:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.1:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.2:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.2:p2:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.3:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.3:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.4:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.4:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.5:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.5:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.6:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.6:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.7:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.7:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.8:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.8:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.9:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:6.9:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:7.0:*:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:7.0:p1:*:*:*:*:*:*","cpe:2.3:a:openbsd:openssh:7.1:p1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0"},{"last_affected":"5.0"},{"introduced":"5.0-p1"},{"last_affected":"5.0-p1"},{"introduced":"5.1"},{"last_affected":"5.1"},{"introduced":"5.1-p1"},{"last_affected":"5.1-p1"},{"introduced":"5.2"},{"last_affected":"5.2"},{"introduced":"5.2-p1"},{"last_affected":"5.2-p1"},{"introduced":"5.3"},{"last_affected":"5.3"},{"introduced":"5.3-p1"},{"last_affected":"5.3-p1"},{"introduced":"5.4"},{"last_affected":"5.4"},{"introduced":"5.4-p1"},{"last_affected":"5.4-p1"},{"introduced":"5.5"},{"last_affected":"5.5"},{"introduced":"5.5-p1"},{"last_affected":"5.5-p1"},{"introduced":"5.6"},{"last_affected":"5.6"},{"introduced":"5.6-p1"},{"last_affected":"5.6-p1"},{"introduced":"5.7"},{"last_affected":"5.7"},{"introduced":"5.7-p1"},{"last_affected":"5.7-p1"},{"introduced":"5.8-p1"},{"last_affected":"5.8-p1"},{"introduced":"5.9"},{"last_affected":"5.9"},{"introduced":"5.9-p1"},{"last_affected":"5.9-p1"},{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"6.0-p1"},{"last_affected":"6.0-p1"},{"introduced":"6.1"},{"last_affected":"6.1"},{"introduced":"6.1-p1"},{"last_affected":"6.1-p1"},{"introduced":"6.2-p1"},{"last_affected":"6.2-p1"},{"introduced":"6.2-p2"},{"last_affected":"6.2-p2"},{"introduced":"6.3"},{"last_affected":"6.3"},{"introduced":"6.3-p1"},{"last_affected":"6.3-p1"},{"introduced":"6.4"},{"last_affected":"6.4"},{"introduced":"6.4-p1"},{"last_affected":"6.4-p1"},{"introduced":"6.5"},{"last_affected":"6.5"},{"introduced":"6.5-p1"},{"last_affected":"6.5-p1"},{"introduced":"6.6"},{"last_affected":"6.6"},{"introduced":"6.6-p1"},{"last_affected":"6.6-p1"},{"introduced":"6.7"},{"last_affected":"6.7"},{"introduced":"6.7-p1"},{"last_affected":"6.7-p1"},{"introduced":"6.8"},{"last_affected":"6.8"},{"introduced":"6.8-p1"},{"last_affected":"6.8-p1"},{"introduced":"6.9"},{"last_affected":"6.9"},{"introduced":"6.9-p1"},{"last_affected":"6.9-p1"},{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"7.0-p1"},{"last_affected":"7.0-p1"},{"introduced":"7.1-p1"},{"last_affected":"7.1-p1"}],"source":"CPE_STRING"}}],"versions":["5.0","5.1","5.2","5.3","5.4","5.5","5.6","5.7","5.8-p1","5.9","6.0","6.1","6.2-p1","6.2-p2","6.3","6.4","6.5","6.6","6.7","6.8","6.9","7.0","7.1-p1","V_7_1_P1","V_7_0_P1","V_6_9_P1","V_6_8_P1","V_6_6_P1","V_6_5_P1","V_6_2_P1","V_6_1_P1","V_6_0_P1","V_5_7_P1","V_5_5_P1","V_5_2_P1","V_5_1_P1","V_5_0_P1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0777.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}