Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-6515 — Improper Input Validation in Openssh

CWE-20 — Improper Input ValidationCWE-770 — Allocation of Resources Without Limits or Throttling13 documents11 sources
Severity
7.5HIGHNVD
OSV5.9
EPSS
81.6%
top 0.81%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
Openbsd OpensshFedoraproject FedoraPaloalto Pan-os
Timeline
PublishedAug 7
Latest updateMay 13

Description

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶Debianopenbsd/openssh< 1:7.3p1-1+3
▶Ubuntuopenbsd/openssh< 1:6.6p1-2ubuntu2.8+1
▶Palo Altopaloalto/pan-os

Also affects: Fedora 24

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-vf2p-h3m7-ch75: The auth_password function in auth-passwd↗2022-05-13
▶
OSV
openssh vulnerabilities↗2016-08-15
▶
CVEList
CVE-2016-6515: The auth_password function in auth-passwd↗2016-08-07
▶
OSV
CVE-2016-6515: The auth_password function in auth-passwd↗2016-08-07
▶

💥Exploits & PoCs

1
Exploit-DB
OpenSSH 7.2 - Denial of Service↗2016-12-07
▶

📋Vendor Advisories

5
Palo Alto
PAN-SA-2020-0004 Informational: Third-party or open source vulnerabilities that do not affect PAN-OS↗2020-05-13
▶
BSD
FreeBSD-SA-17:06.openssh: OpenSSH Denial of Service vulnerability↗2017-08-10
▶
Ubuntu
OpenSSH vulnerabilities↗2016-08-15
▶
Red Hat
openssh: Denial of service via very long passwords↗2016-07-21
▶
Debian
CVE-2016-6515: openssh - The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does n...↗2016
▶

💬Community

2
Bugzilla
CVE-2016-6515 openssh: Denial of service via very long passwords↗2016-08-08
▶
Bugzilla
CVE-2016-6515 openssh: Denial of service via very long passwords [fedora-all]↗2016-08-08
▶
CVE-2016-6515 — Improper Input Validation in Openssh | cvebase