製品・ソフトウェアに関する情報

JVN脆弱性詳細

OpenSSH のクライアントの roaming_common.c の resend_bytes 関数におけるプロセスメモリから重要な情報を取得される脆弱性

Title	OpenSSH のクライアントの roaming_common.c の resend_bytes 関数におけるプロセスメモリから重要な情報を取得される脆弱性
Summary	OpenSSH のクライアントの roaming_common.c の resend_bytes 関数には、プロセスメモリから重要な情報を取得される脆弱性が存在します。
Possible impacts	リモートサーバにより、すべてのバッファの送信をリクエストされることで、プロセスメモリから重要な情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 14, 2016, midnight
Registration Date	Jan. 22, 2016, 1:52 p.m.
Last Update	Oct. 27, 2016, 6:07 p.m.

CVSS3.0 : 警告
Score	6.5
Vector	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS2.0 : 警告
Score	4
Vector	AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected System

オラクル

Oracle Linux

Oracle Solaris

OpenBSD

OpenSSH 5.x

OpenSSH 6.x

OpenSSH 7.1p2 未満の 7.x

アップル

Apple Mac OS X 10.10.5

Apple Mac OS X 10.11 から 10.11.3

Apple Mac OS X 10.9.5

ソフォス

Sophos UTM ソフトウェア

ヒューレット・パッカード・エンタープライズ

HPE Remote Device Access: Virtual Customer Access System

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-0777	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
National Vulnerability Database (NVD)
2	CVE-2016-0777	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0777

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Apple Security Updates
2	HT206167	https://support.apple.com/en-us/HT206167
Apple セキュリティアップデート
3	HT206167	https://support.apple.com/ja-jp/HT206167
HPE Security Bulletin
4	HPSBGN03638	https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05247375
MIRACLE LINUX アップデート情報
5	AXSA:2016-037:01	https://tsn.miraclelinux.com/ja/node/6397
OpenSSH
6	release-7.1p2	http://www.openssh.com/txt/release-7.1p2
Oracle Technology Network
7	Oracle Linux Bulletin - January 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
8	Oracle Solaris Third Party Bulletin - October 2015	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
SOPHOS BLOG
9	UTM Up2Date 9.319 released	https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/
10	UTM Up2Date 9.354 released	https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/

その他

No	Name	URL
JVN
1	JVNVU#95595627	http://jvn.jp/vu/JVNVU95595627/index.html
2	JVNVU#97668313	http://jvn.jp/vu/JVNVU97668313
US-CERT Vulnerability Note
3	VU#456088	https://www.kb.cert.org/vuls/id/456088
関連文書
4	OpenBSD Journal	http://undeadly.org/cgi?action=article&sid=20160114142733
5	Qualys Security Advisory	https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt

Change Log

No	Changed Details	Date of change
0	[2016年01月22日] 掲載 [2016年03月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT206167) を追加ベンダ情報：アップル (APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002) を追加参考情報：JVN (JVNVU#97668313) を追加 [2016年05月31日] CVSS による深刻度：内容を更新ベンダ情報：ソフォス (UTM Up2Date 9.354 released) を追加ベンダ情報：ソフォス (UTM Up2Date 9.319 released) を追加 [2016年10月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Linux Bulletin - January 2016) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03638) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2016-0777

Summary	The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
Publication Date	Jan. 15, 2016, 7:59 a.m.
Registration Date	Jan. 26, 2021, 2:04 p.m.
Last Update	Nov. 21, 2024, 11:42 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:sophos:unified_threat_management_software:9.318:::::::*
cpe:2.3:a:sophos:unified_threat_management_software:9.353:::::::*
execution environment
1	cpe:2.3:h:sophos:unified_threat_management:110:::::::*
2	cpe:2.3:h:sophos:unified_threat_management:120:::::::*
3	cpe:2.3:h:sophos:unified_threat_management:220:::::::*
4	cpe:2.3:h:sophos:unified_threat_management:320:::::::*
5	cpe:2.3:h:sophos:unified_threat_management:425:::::::*
6	cpe:2.3:h:sophos:unified_threat_management:525:::::::*
7	cpe:2.3:h:sophos:unified_threat_management:625:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:oracle:solaris:11.3:::::::*
cpe:2.3:o:oracle:linux:7:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:openbsd:openssh:5.4:::::::*
cpe:2.3:a:openbsd:openssh:5.5:::::::*
cpe:2.3:a:openbsd:openssh:6.6:::::::*
cpe:2.3:a:openbsd:openssh:6.7:::::::*
cpe:2.3:a:openbsd:openssh:5.3:::::::*
cpe:2.3:a:openbsd:openssh:5.0:p1::::::
cpe:2.3:a:openbsd:openssh:5.4:p1::::::
cpe:2.3:a:openbsd:openssh:6.2:p1::::::
cpe:2.3:a:openbsd:openssh:6.9:::::::*
cpe:2.3:a:openbsd:openssh:6.8:p1::::::
cpe:2.3:a:openbsd:openssh:5.7:p1::::::
cpe:2.3:a:openbsd:openssh:6.0:::::::*
cpe:2.3:a:openbsd:openssh:6.3:::::::*
cpe:2.3:a:openbsd:openssh:6.1:p1::::::
cpe:2.3:a:openbsd:openssh:5.9:::::::*
cpe:2.3:a:openbsd:openssh:6.5:p1::::::
cpe:2.3:a:openbsd:openssh:6.1:::::::*
cpe:2.3:a:openbsd:openssh:5.1:p1::::::
cpe:2.3:a:openbsd:openssh:6.3:p1::::::
cpe:2.3:a:openbsd:openssh:7.0:p1::::::
cpe:2.3:a:openbsd:openssh:5.2:::::::*
cpe:2.3:a:openbsd:openssh:5.6:p1::::::
cpe:2.3:a:openbsd:openssh:5.9:p1::::::
cpe:2.3:a:openbsd:openssh:7.1:::::::*
cpe:2.3:a:openbsd:openssh:5.8:::::::*
cpe:2.3:a:openbsd:openssh:6.0:p1::::::
cpe:2.3:a:openbsd:openssh:6.8:::::::*
cpe:2.3:a:openbsd:openssh:5.7:::::::*
cpe:2.3:a:openbsd:openssh:6.4:::::::*
cpe:2.3:a:openbsd:openssh:5.2:p1::::::
cpe:2.3:a:openbsd:openssh:6.6:p1::::::
cpe:2.3:a:openbsd:openssh:6.5:::::::*
cpe:2.3:a:openbsd:openssh:6.7:p1::::::
cpe:2.3:a:openbsd:openssh:5.3:p1::::::
cpe:2.3:a:openbsd:openssh:6.2:::::::*
cpe:2.3:a:openbsd:openssh:7.0:::::::*
cpe:2.3:a:openbsd:openssh:5.8:p1::::::
cpe:2.3:a:openbsd:openssh:6.9:p1::::::
cpe:2.3:a:openbsd:openssh:7.1:p1::::::
cpe:2.3:a:openbsd:openssh:5.1:::::::*
cpe:2.3:a:openbsd:openssh:5.5:p1::::::
cpe:2.3:a:openbsd:openssh:5.6:::::::*
cpe:2.3:a:openbsd:openssh:6.4:p1::::::
cpe:2.3:a:openbsd:openssh:5.0:::::::*
cpe:2.3:a:openbsd:openssh:6.2:p2::::::

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:hp:remote_device_access_virtual_customer_access_system::::::::			15.07

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:apple:mac_os_x::::::::			10.11.3

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734	Third Party Advisory
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734	Third Party Advisory
3	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	Mailing List Third Party Advisory
4	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	Mailing List Third Party Advisory
5	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html	Mailing List Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html	Mailing List Third Party Advisory
7	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html	Mailing List Third Party Advisory
8	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html	Mailing List Third Party Advisory
9	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html	Mailing List Third Party Advisory
10	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html	Mailing List Third Party Advisory
11	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html	Mailing List Third Party Advisory
12	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html	Mailing List Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html	Mailing List Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html	Mailing List Third Party Advisory
21	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html	Mailing List Third Party Advisory
22	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html	Mailing List Third Party Advisory
23	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html	Mailing List Third Party Advisory
24	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html	Mailing List Third Party Advisory
25	http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html	Third Party Advisory VDB Entry
26	http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html	Third Party Advisory VDB Entry
27	http://seclists.org/fulldisclosure/2016/Jan/44	Mailing List Third Party Advisory
28	http://seclists.org/fulldisclosure/2016/Jan/44	Mailing List Third Party Advisory
29	http://www.debian.org/security/2016/dsa-3446	Third Party Advisory
30	http://www.debian.org/security/2016/dsa-3446	Third Party Advisory
31	http://www.openssh.com/txt/release-7.1p2	Vendor Advisory
32	http://www.openssh.com/txt/release-7.1p2	Vendor Advisory
33	http://www.openwall.com/lists/oss-security/2016/01/14/7	Mailing List Third Party Advisory
34	http://www.openwall.com/lists/oss-security/2016/01/14/7	Mailing List Third Party Advisory
35	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Third Party Advisory
36	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	Third Party Advisory
37	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
38	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
39	http://www.securityfocus.com/archive/1/537295/100/0/threaded	Third Party Advisory VDB Entry
40	http://www.securityfocus.com/archive/1/537295/100/0/threaded	Third Party Advisory VDB Entry
41	http://www.securityfocus.com/bid/80695	Third Party Advisory VDB Entry
42	http://www.securityfocus.com/bid/80695	Third Party Advisory VDB Entry
43	http://www.securitytracker.com/id/1034671	Third Party Advisory VDB Entry
44	http://www.securitytracker.com/id/1034671	Third Party Advisory VDB Entry
45	http://www.ubuntu.com/usn/USN-2869-1	Third Party Advisory
46	http://www.ubuntu.com/usn/USN-2869-1	Third Party Advisory
47	https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/	Third Party Advisory
48	https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/	Third Party Advisory
49	https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/	Third Party Advisory
50	https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/	Third Party Advisory
51	https://bto.bluecoat.com/security-advisory/sa109	Third Party Advisory
52	https://bto.bluecoat.com/security-advisory/sa109	Third Party Advisory
53	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
54	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
55	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375	Third Party Advisory
56	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375	Third Party Advisory
57	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	Third Party Advisory
58	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	Third Party Advisory
59	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	Third Party Advisory
60	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	Third Party Advisory
61	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
62	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
63	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc	Third Party Advisory
64	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc	Third Party Advisory
65	https://security.gentoo.org/glsa/201601-01	Third Party Advisory
66	https://security.gentoo.org/glsa/201601-01	Third Party Advisory
67	https://support.apple.com/HT206167	Third Party Advisory
68	https://support.apple.com/HT206167	Third Party Advisory

Common Vulnerabilities List

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:sophos:unified_threat_management_software:9.318:::::::*
cpe:2.3:a:sophos:unified_threat_management_software:9.353:::::::*
execution environment
1	cpe:2.3:h:sophos:unified_threat_management:110:::::::*
2	cpe:2.3:h:sophos:unified_threat_management:120:::::::*
3	cpe:2.3:h:sophos:unified_threat_management:220:::::::*
4	cpe:2.3:h:sophos:unified_threat_management:320:::::::*
5	cpe:2.3:h:sophos:unified_threat_management:425:::::::*
6	cpe:2.3:h:sophos:unified_threat_management:525:::::::*
7	cpe:2.3:h:sophos:unified_threat_management:625:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:openbsd:openssh:5.4:::::::*
cpe:2.3:a:openbsd:openssh:5.5:::::::*
cpe:2.3:a:openbsd:openssh:6.6:::::::*
cpe:2.3:a:openbsd:openssh:6.7:::::::*
cpe:2.3:a:openbsd:openssh:5.3:::::::*
cpe:2.3:a:openbsd:openssh:5.0:p1::::::
cpe:2.3:a:openbsd:openssh:5.4:p1::::::
cpe:2.3:a:openbsd:openssh:6.2:p1::::::
cpe:2.3:a:openbsd:openssh:6.9:::::::*
cpe:2.3:a:openbsd:openssh:6.8:p1::::::
cpe:2.3:a:openbsd:openssh:5.7:p1::::::
cpe:2.3:a:openbsd:openssh:6.0:::::::*
cpe:2.3:a:openbsd:openssh:6.3:::::::*
cpe:2.3:a:openbsd:openssh:6.1:p1::::::
cpe:2.3:a:openbsd:openssh:5.9:::::::*
cpe:2.3:a:openbsd:openssh:6.5:p1::::::
cpe:2.3:a:openbsd:openssh:6.1:::::::*
cpe:2.3:a:openbsd:openssh:5.1:p1::::::
cpe:2.3:a:openbsd:openssh:6.3:p1::::::
cpe:2.3:a:openbsd:openssh:7.0:p1::::::
cpe:2.3:a:openbsd:openssh:5.2:::::::*
cpe:2.3:a:openbsd:openssh:5.6:p1::::::
cpe:2.3:a:openbsd:openssh:5.9:p1::::::
cpe:2.3:a:openbsd:openssh:7.1:::::::*
cpe:2.3:a:openbsd:openssh:5.8:::::::*
cpe:2.3:a:openbsd:openssh:6.0:p1::::::
cpe:2.3:a:openbsd:openssh:6.8:::::::*
cpe:2.3:a:openbsd:openssh:5.7:::::::*
cpe:2.3:a:openbsd:openssh:6.4:::::::*
cpe:2.3:a:openbsd:openssh:5.2:p1::::::
cpe:2.3:a:openbsd:openssh:6.6:p1::::::
cpe:2.3:a:openbsd:openssh:6.5:::::::*
cpe:2.3:a:openbsd:openssh:6.7:p1::::::
cpe:2.3:a:openbsd:openssh:5.3:p1::::::
cpe:2.3:a:openbsd:openssh:6.2:::::::*
cpe:2.3:a:openbsd:openssh:7.0:::::::*
cpe:2.3:a:openbsd:openssh:5.8:p1::::::
cpe:2.3:a:openbsd:openssh:6.9:p1::::::
cpe:2.3:a:openbsd:openssh:7.1:p1::::::
cpe:2.3:a:openbsd:openssh:5.1:::::::*
cpe:2.3:a:openbsd:openssh:5.5:p1::::::
cpe:2.3:a:openbsd:openssh:5.6:::::::*
cpe:2.3:a:openbsd:openssh:6.4:p1::::::
cpe:2.3:a:openbsd:openssh:5.0:::::::*
cpe:2.3:a:openbsd:openssh:6.2:p2::::::