Wind River Support Network


LIN6-11097 : Security Advisory - libssh2 - CVE-2016-0787

Created: Apr 19, 2016    Updated: Dec 3, 2018
Resolved Date: Apr 19, 2016
Previous ID: LIN5-21356
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


A type confusion issue was found in the way libssh2 generated ephemeral secrets for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. This would cause an SSHv2 Diffie-Hellman handshake to use significantly less secure random parameters.

Steps to Reproduce


Other Downloads

Live chat