CVE-2016-1907: OpenBSD OpenSSH

Medium severity, CVSS 5.3. EPSS: 14.3% chance of exploitation in the next 30 days.

The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.

Affected products

• OpenBSD OpenSSH: version 6.8 only; version 6.9 only; version 7.0 only; version 7.1 only

Published 2016-01-19. Last modified 2026-06-17.