CVE-2016-6210
Information exposure in Openbsd Openssh
CVSS score
5.9
EPSS probability
%88.9
Risk score
5.2
Published
9 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long. OpenSSH, which rates the flaw critical, released version 10.6p2 today to block it. Alpine has published fixed packages for every
Similar Vulnerabilities
8.8
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:28EPSS %100
9.8
CVE-2023-38408Vulnerability in N/a
Patch verified Public Exploits:9EPSS %80
6.5
CVE-2023-25136Vulnerability in N/a
Patch verified Public Exploits:10EPSS %90
5.9
CVE-2023-48795Vulnerability in N/a
Patch verified Public Exploits:10EPSS %94
5.9
CVE-2019-6111Path traversal in N/a
Patch verified Public Exploits:3EPSS %58
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2016-6210"