Vulnerabilities > Openbsd > Openssh > 7.3

DATE CVE VULNERABILITY TITLE RISK
2017-01-05 CVE-2016-10009 Untrusted Search Path vulnerability in Openbsd Openssh
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
network
low complexity
openbsd CWE-426
7.3
2016-12-09 CVE-2016-8858 Resource Management Errors vulnerability in Openbsd Openssh
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.
network
low complexity
openbsd CWE-399
7.5