智能化下的产物,无人棋牌室
SecurityFocus 在其网站上公布了一个关于 OpenSSH 的漏洞,信息如下:
OpenSSH CVE-2016-10009 远程执行代码漏洞
Bugtraq ID:94968
Class:Unknown
CVE:CVE-2016-10009
Remote:Yes
Local:No
Published:Dec 19 2016 12:00AM
Updated:Dec 20 2016 01:11PM
Credit:Jann Horn of Project Zero.
易受攻击的版本:
- OpenSSH OpenSSH 7.3
- OpenSSH OpenSSH 7.2p2
- OpenSSH OpenSSH 7.2
- OpenSSH OpenSSH 7.1p2
- OpenSSH OpenSSH 7.1p1
- OpenSSH OpenSSH 7.1
- OpenSSH OpenSSH 7.0
- OpenSSH OpenSSH 6.9p1
- OpenSSH OpenSSH 6.9
- OpenSSH OpenSSH 6.6
- OpenSSH OpenSSH 6.5
- OpenSSH OpenSSH 6.4
- OpenSSH OpenSSH 6.3
- OpenSSH OpenSSH 6.2
- OpenSSH OpenSSH 6.1
- OpenSSH OpenSSH 6.0
- OpenSSH OpenSSH 5.8
- OpenSSH OpenSSH 5.7
- OpenSSH OpenSSH 5.6
- OpenSSH OpenSSH 5.5
- OpenSSH OpenSSH 5.4
- OpenSSH OpenSSH 5.3
- OpenSSH OpenSSH 5.2
- OpenSSH OpenSSH 5.1
- OpenSSH OpenSSH 5.0
不易受攻击的版本:OpenSSH OpenSSH 7.4
因此,还是建议升级到最新版的 OpenSSH。
http://www.securityfocus.com/bid/94968/info