CVE-2016-0787
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-0787
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0787.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-0787
- Related
- Published
- 2016-04-13T17:59:10Z
- Modified
- 2024-09-18T02:07:24.425466Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The diffiehellmansha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
- References
-
- http://www.debian.org/security/2016/dsa-3487
- https://bto.bluecoat.com/security-advisory/sa120
- https://security.gentoo.org/glsa/201606-12
- https://www.libssh2.org/adv_20160223.html
- https://www.libssh2.org/CVE-2016-0787.patch
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/82514
- https://kc.mcafee.com/corporate/index?page=content&id=SB10156
- https://puppet.com/security/cve/CVE-2016-0787
- https://security.alpinelinux.org/vuln/CVE-2016-0787
- https://security-tracker.debian.org/tracker/CVE-2016-0787
Affected packages
Alpine:v3.4 / libssh2
Package
- Name
- libssh2
- Purl
- pkg:apk/alpine/libssh2?arch=source
Debian:11 / libssh2
Package
- Name
- libssh2
- Purl
- pkg:deb/debian/libssh2?arch=source
Debian:12 / libssh2
Package
- Name
- libssh2
- Purl
- pkg:deb/debian/libssh2?arch=source
Debian:13 / libssh2
Package
- Name
- libssh2
- Purl
- pkg:deb/debian/libssh2?arch=source
Git / github.com/libssh2/libssh2
Affected ranges
- Type
- GIT
- Repo
- https://github.com/libssh2/libssh2
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
RELEASE.*
RELEASE.0.1
RELEASE.0.10
RELEASE.0.11
RELEASE.0.12
RELEASE.0.13
RELEASE.0.14
RELEASE.0.15
RELEASE.0.16
RELEASE.0.17
RELEASE.0.18
RELEASE.0.3
RELEASE.0.5
RELEASE.0.6
RELEASE.0.7
RELEASE.0.8
RELEASE.1.0
RELEASE.1.1
beforenb-0.*
beforenb-0.14
beforenb2-0.*
beforenb2-0.14
libssh2-1.*
libssh2-1.2
libssh2-1.2.1
libssh2-1.2.2
libssh2-1.2.3
libssh2-1.2.4
libssh2-1.2.5
libssh2-1.2.6
libssh2-1.2.7
libssh2-1.2.8
libssh2-1.2.9
libssh2-1.3.0
libssh2-1.4.0
libssh2-1.4.1
libssh2-1.4.2
libssh2-1.4.3
libssh2-1.5.0
libssh2-1.6.0