CVE-2016-0787

MEDIUM

libssh2 <1.7.0 - Info Disclosure

Title source: llm

Description

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

References (12)

[Mailing List] http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

[Various Sources] https://bto.bluecoat.com/security-advisory/sa120

[Vendor Advisory] https://kc.mcafee.com/corporate/index?page=content&id=SB10156

[Various Sources] https://puppet.com/security/cve/CVE-2016-0787

[Third Party Advisory] https://security.gentoo.org/glsa/201606-12

[Patch] https://www.libssh2.org/CVE-2016-0787.patch

[Vendor Advisory] https://www.libssh2.org/adv_20160223.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/82514

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html

[Third Party Advisory] http://www.debian.org/security/2016/dsa-3487

Scores

CVSS v3 5.9

EPSS 0.0406

EPSS Percentile 88.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (6)

fedoraproject/fedora

fedoraproject/fedora

opensuse/opensuse

libssh2/libssh2 < 1.6.0

debian/debian_linux

debian/debian_linux

Timeline

Published Apr 13, 2016

Tracked Since Feb 18, 2026