Wind River Support Network


LIN9-2924 : Security Advisory - openssh - CVE-2016-10011

Created: Jan 8, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 18, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace


It was found that there is a theoretical leak of host private key material to privilege-separated child processes via realloc() when reading keys. No such leak was observed in practice for normal-sized keys, nor does a leak to the child processes directly expose key material to unprivileged users.

CVE assignment:

External References:

Upstream patch:

Other Downloads


Live chat