CVE-2016-8858
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-8858
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenSSH'ssh/kex.c'拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 6.x版本和7.x至7.3版本中的kex.c文件的‘kex_input_kexinit’函数存在拒绝服务漏洞。远程攻击者可通过发送许多复制的KEXINIT请求利用该漏洞造成拒绝服务。注意：第三方报告称不将OpenSSH upstream视为安全漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-8858
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Proof of concept for CVE-2016-8858 | https://github.com/dag-erling/kexkill | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-8858
请登录查看更多情报信息。
- https://security.gentoo.org/glsa/201612-18vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-8858
Same Patch Batch · n/a · 2016-12-09 · 19 CVEs total
| CVE-2016-9105 | QEMU 拒绝服务漏洞 | |
| CVE-2016-9832 | PwC ACE-ABAP 安全漏洞 | |
| CVE-2016-9014 | Django 安全绕过漏洞 | |
| CVE-2016-9013 | Django 安全漏洞 | |
| CVE-2016-6829 | Crowbar Framework 信任管理问题漏洞 | |
| CVE-2016-6523 | Dotclear 跨站脚本漏洞 | |
| CVE-2016-6301 | BusyBox 拒绝服务漏洞 | |
| CVE-2015-8786 | Pivotal Software RabbitMQ 拒绝服务漏洞 | |
| CVE-2016-9106 | QEMU 拒绝服务漏洞 | |
| CVE-2016-5423 | PostgreSQL 远程代码执行漏洞 | |
| CVE-2016-9104 | QEMU 输入验证错误漏洞 | |
| CVE-2016-9103 | QEMU 信息泄露漏洞 | |
| CVE-2016-9102 | QEMU 资源管理错误漏洞 | |
| CVE-2016-9101 | QEMU 安全漏洞 | |
| CVE-2016-6501 | JFrog Artifactory 安全漏洞 | |
| CVE-2016-6496 | Atlassian Crowd 安全漏洞 | |
| CVE-2016-6321 | GNU Tar 安全绕过漏洞 | |
| CVE-2016-5424 | PostgreSQL 本地提权漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2016-8858
No comments yet