CVE-2016-10010

Mô tả

Tham khảo

• packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html
• openwall.com/lists/oss-security/2016/12/19/2 · Mailing List
• securityfocus.com/bid/94972
• securitytracker.com/id/1037490
• slackware.com/security/viewer.php
• bugs.chromium.org/p/project-zero/issues/detail
• cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
• openbsd/src commit c76fac6 · Patch
• security.freebsd.org/advisories/FreeBSD-SA-17:01.openssh.asc
• security.netapp.com/advisory/ntap-20171130-0002
• support.hpe.com/hpsc/doc/public/display
• exploit-db.com/exploits/40962

Lỗ hổng khác của openssh

• CVE-2026-106583CAO 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587THẤP 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586TRUNG BÌNH 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585TRUNG BÌNH 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584THẤP 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…