CVE-2016-10010

HIGH 7.0EPSS 4.2%

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.

CVSS v3.1 CNA: 7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.0 NVD: 7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS: 4.24% chance of exploitation in the next 30 days, 91st percentile
Published: 2017-01-05
Updated: 2026-05-29

ExploitDB entries (1)

https://www.exploit-db.com/exploits/40962

Security advisories

openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce
http://www.openwall.com/lists/oss-security/2016/12/19/2
http://www.securityfocus.com/bid/94972

References

CVE Record
NVD entry