All vulnerabilities

Servers and applications

CVE-2016-1907

The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.

Severity
Medium 5.3
Published
19 Jan 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSHServers and applications · cpe:a:openbsd:openssh
  • Version 7.1-p1
  • Version 7.1
  • Version 7.0-p1
  • Version 7.0
All 8 release lines
  • Version 6.8
  • Version 6.8-p1
  • Version 6.9
  • Version 6.9-p1
  • Version 7.0
  • Version 7.0-p1
  • Version 7.1
  • Version 7.1-p1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-1907
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-1907