{"id":"CVE-2016-0777","state":"PUBLISHED","title":"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by r","description":"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.","publishedAt":"2016-01-14T00:00:00.000Z","updatedAt":"2026-05-29T20:30:01.702Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"redhat","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html","https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375","http://www.securityfocus.com/archive/1/537295/100/0/threaded","https://support.apple.com/HT206167","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734","http://www.securityfocus.com/bid/80695","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","http://www.openssh.com/txt/release-7.1p2","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","https://bto.bluecoat.com/security-advisory/sa109","http://www.securitytracker.com/id/1034671","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html","https://security.gentoo.org/glsa/201601-01","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","http://www.openwall.com/lists/oss-security/2016/01/14/7","http://seclists.org/fulldisclosure/2016/Jan/44","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html","http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html","http://www.ubuntu.com/usn/USN-2869-1","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","http://www.debian.org/security/2016/dsa-3446","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T19:42:22.336Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/0xxx/CVE-2016-0777.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2016-0777","state":"PUBLISHED","datePublished":"2016-01-14T00:00:00.000Z","dateUpdated":"2026-05-29T20:30:01.702Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2015-12-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html","name":"SUSE-SU-2016:0117","tags":["vendor-advisory"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","name":"APPLE-SA-2016-03-21-5","tags":["vendor-advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375"},{"url":"http://www.securityfocus.com/archive/1/537295/100/0/threaded","name":"20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list"]},{"url":"https://support.apple.com/HT206167"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","name":"FEDORA-2016-4556904561","tags":["vendor-advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734"},{"url":"http://www.securityfocus.com/bid/80695","name":"80695","tags":["vdb-entry"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc","name":"FreeBSD-SA-16:07","tags":["vendor-advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","name":"FEDORA-2016-c330264861","tags":["vendor-advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"},{"url":"http://www.openssh.com/txt/release-7.1p2"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html","name":"openSUSE-SU-2016:0128","tags":["vendor-advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","name":"FEDORA-2016-2e89eba0c1","tags":["vendor-advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa109"},{"url":"http://www.securitytracker.com/id/1034671","name":"1034671","tags":["vdb-entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html","name":"openSUSE-SU-2016:0127","tags":["vendor-advisory"]},{"url":"https://security.gentoo.org/glsa/201601-01","name":"GLSA-201601-01","tags":["vendor-advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/7","name":"[oss-security] 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/44","name":"20160115 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html","name":"SUSE-SU-2016:0119","tags":["vendor-advisory"]},{"url":"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html","name":"SUSE-SU-2016:0118","tags":["vendor-advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html","name":"FEDORA-2016-67c6ef0d4f","tags":["vendor-advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html","name":"SUSE-SU-2016:0120","tags":["vendor-advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2869-1","name":"USN-2869-1","tags":["vendor-advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"},{"url":"http://www.debian.org/security/2016/dsa-3446","name":"DSA-3446","tags":["vendor-advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2022-12-13T00:00:00.000Z"},"datePublic":"2016-01-14T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","tags":["x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html","name":"SUSE-SU-2016:0117","tags":["vendor-advisory","x_transferred"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","tags":["x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","name":"APPLE-SA-2016-03-21-5","tags":["vendor-advisory","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375","tags":["x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/537295/100/0/threaded","name":"20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list","x_transferred"]},{"url":"https://support.apple.com/HT206167","tags":["x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","name":"FEDORA-2016-4556904561","tags":["vendor-advisory","x_transferred"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734","tags":["x_transferred"]},{"url":"http://www.securityfocus.com/bid/80695","name":"80695","tags":["vdb-entry","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","tags":["x_transferred"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc","name":"FreeBSD-SA-16:07","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","name":"FEDORA-2016-c330264861","tags":["vendor-advisory","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_transferred"]},{"url":"http://www.openssh.com/txt/release-7.1p2","tags":["x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html","name":"openSUSE-SU-2016:0128","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","name":"FEDORA-2016-2e89eba0c1","tags":["vendor-advisory","x_transferred"]},{"url":"https://bto.bluecoat.com/security-advisory/sa109","tags":["x_transferred"]},{"url":"http://www.securitytracker.com/id/1034671","name":"1034671","tags":["vdb-entry","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html","name":"openSUSE-SU-2016:0127","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201601-01","name":"GLSA-201601-01","tags":["vendor-advisory","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/7","name":"[oss-security] 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/44","name":"20160115 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778","tags":["mailing-list","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html","name":"SUSE-SU-2016:0119","tags":["vendor-advisory","x_transferred"]},{"url":"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html","tags":["x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html","name":"SUSE-SU-2016:0118","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html","name":"FEDORA-2016-67c6ef0d4f","tags":["vendor-advisory","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html","name":"SUSE-SU-2016:0120","tags":["vendor-advisory","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2869-1","name":"USN-2869-1","tags":["vendor-advisory","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","tags":["x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","tags":["x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3446","name":"DSA-3446","tags":["vendor-advisory","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T22:30:04.441Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-05-29T20:29:54.649786Z","id":"CVE-2016-0777","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-29T20:30:01.702Z"}}]}}}