A gssapi.patch that is used in many Linux distributions has revealed a vulnerability that leads to memory corruption and bypassing of the privilege separation mechanism in OpenSSH, which implements key exchange based on GSSAPI. This vulnerability can be exploited remotely. Currently, the presence of the vulnerability is confirmed in Debian and Ubuntu. The vulnerability manifests when the "GSSAPIKeyExchange yes" option is enabled in the settings.
Notably, at the time, OpenSSH developers refused to accept changes to support GSSAPI due to safety concerns. However, many Linux distributions included this patch in their OpenSSH packages.
Forrás: linux.org.ru
