topic Re: CVE-2016-8858 OpenSSH Remote Denial of Service vulnerability Exposure in Security

CVE-2016-8858 OpenSSH Remote Denial of Service vulnerability Exposure

mosesz — Wed, 03 Jan 2024 03:47:28 GMT

NVD - CVE-2016-8858 (nist.gov)

Juniper reported this as applicable to their OS also. I would like to confirm whether Extreme devices are exposed to this CVE. I don't see a SA on this. Thank you very much!

Re: CVE-2016-8858 OpenSSH Remote Denial of Service vulnerability Exposure

Robert_Haynes — Wed, 03 Jan 2024 14:30:10 GMT

If you take the NVD notice verbatim that this applies to OpenSSH 6.x through 7.3 then it does not apply to the ExtremeCloud IQ - Site Engine and its portfolio products.

However to obtain an official answer / response from Extreme and our SA team for XIQ-SE and any other products please open a GTAC case w/ Extreme and provide a list of products you would like a response for. The SA team will prepare a response to a specific list, not "All".

Re: CVE-2016-8858 OpenSSH Remote Denial of Service vulnerability Exposure

mosesz — Thu, 04 Jan 2024 02:03:12 GMT

Thank you! Where to sumbit a GTAC case?

Re: CVE-2016-8858 OpenSSH Remote Denial of Service vulnerability Exposure

Robert_Haynes — Thu, 04 Jan 2024 13:12:17 GMT

support.extremenetworks.com -> Log In -> Case Management

Alternatively, please review https://extreme-networks.my.site.com/ExtrArticleDetail?an=000082421.