CVE-2019-16905
High
Description
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
SeverityHigh
CVSS7.8
Exploit probability—
ProductOpenbsd Openssh
PublishedOct 9, 2019
First seenOct 9, 2019
How to fix
Update
- openbsd openssh8.1 or later
- siemens scalance_x204rna_firmware3.2.7 or later
- siemens scalance_x204rna_ecc_firmware3.2.7 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd openssh | 7.7 ≤ v ≤ 7.9, 8.0 ≤ v < 8.1 | 8.1 |
| netapp cloud_backup | No range specified | — |
| netapp steelstore_cloud_integrated_storage | No range specified | — |
| siemens scalance_x204rna_firmware | v < 3.2.7 | 3.2.7 |
| siemens scalance_x204rna_ecc_firmware | v < 3.2.7 | 3.2.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.