CVE-2016-8858
HIGHOpenSSH 6.x-7.3 - Denial of Service via Duplicate KEXINIT Requests
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-8858. PoCs published by dag-erling.
AI-analyzed exploit summary The repository contains a functional PoC (kexkill) that exploits CVE-2016-8858 by sending a stream of KEXINIT packets to an SSH server, causing memory exhaustion in vulnerable OpenSSH versions. The code includes a well-structured implementation with connection handling, packet crafting, and state management.
Description
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
Exploits (1)
The repository contains a functional PoC (kexkill) that exploits CVE-2016-8858 by sending a stream of KEXINIT packets to an SSH server, causing memory exhaustion in vulnerable OpenSSH versions. The code includes a well-structured implementation with connection handling, packet crafting, and state management.
References (13)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H