Wind River Support Network


LIN5-22310 : Security Advisory - openssh - CVE-2016-10011

Created: Dec 21, 2016    Updated: May 29, 2018
Resolved Date: Jan 9, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace


It was found that there is a theoretical leak of host private key material to privilege-separated child processes via realloc() when reading keys. No such leak was observed in practice for normal-sized keys, nor does a leak to the child processes directly expose key material to unprivileged users.

CVE assignment:

External References:

Upstream patch:

Other Downloads

Live chat