CVE-2016-0778

CVE-2016-0778 is a heap-based buffer overflow vulnerability in OpenSSH client versions 5.x, 6.x, and 7.x before 7.1p2, specifically within the roaming_read and roaming_write functions. This flaw, triggered when certain proxy and forward options are enabled, allows remote servers to cause a denial of service or potentially other unspecified impacts by requesting numerous forwardings. The vulnerability carries a high severity CVSS score of 8.1, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it has high attack complexity. Its EPSS score is low, suggesting a low probability of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified.