High severity7.5NVD Advisory· Published Jan 21, 2018· Updated Apr 29, 2026
CVE-2016-10708
CVE-2016-10708
Description
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
Affected products
15cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
- cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*Range: >=9.4
- cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:storagegrid_webscale:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:vasa_provider:-:*:*:*:*:*:*:*
Patches
14a354fc23117Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
11- blog.swiecki.net/2018/01/fuzzing-tcp-servers.htmlnvdPatchThird Party Advisory
- anongit.mindrot.org/openssh.git/commit/nvdPatchThird Party Advisory
- www.securityfocus.com/bid/102780nvdThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2018/01/msg00031.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/09/msg00010.htmlnvdMailing ListThird Party Advisory
- security.netapp.com/advisory/ntap-20180423-0003/nvdThird Party Advisory
- usn.ubuntu.com/3809-1/nvdThird Party Advisory
- www.openssh.com/releasenotes.htmlnvdRelease NotesVendor Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-676336.pdfnvd
- kc.mcafee.com/corporate/indexnvd
- support.f5.com/csp/article/K32485746nvd
News mentions
0No linked articles in our index yet.