Wind River Support Network


LIN9-2952 : Security Advisory - openssh - CVE-2016-10010

Created: Jan 12, 2017    Updated: Dec 3, 2018
Resolved Date: Feb 7, 2017
Found In Version: unknown
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace


It was found that when privilege separation was disabled in OpenSSH, forwarded Unix-domain sockets would be created by sshd with root privileges instead of the privileges of the authenticated user. This could allow an authenticated attacker to potentially gain root privileges on the host system.

Note: privileges separation has been enabled by default since OpenSSH 3.3/3.3p1 (2002-06-21). Thus, OpenSSH in any version of RHEL is not affected by default. An affected OpenSSH configuration would have to specifically disable privilege separation with the "UsePrivilegeSeparation no" configuration directive in  /etc/ssh/sshd_config. More information is also available in .

CVE assignment:

Upstream patch:

Other Downloads


Live chat