Bug 200239

Summary:	[security] crypto/openssh - heap overflow
Product:	Base System	Reporter:	Sevan Janiyan <venture37>
Component:	bin	Assignee:	Dag-Erling Smørgrav <des>
Status:	Closed FIXED
Severity:	Affects Many People	CC:	delphij, emaste, secteam
Priority:	---
Version:	CURRENT
Hardware:	Any
OS:	Any

Description Sevan Janiyan 2015-05-16 13:32:37 UTC

http://www.openwall.com/lists/oss-security/2015/05/16/3

Comment 1 Dag-Erling Smørgrav freebsd_committer

2015-05-21 15:19:19 UTC

This was found to be harmless—it can only be exploited by someone who already has write access to the SSH client configuration file.