CVE-2016-10011

CVE-2016-10011 is a medium-severity vulnerability affecting OpenSSH versions prior to 7.4. It stems from improper handling of buffer contents during realloc operations in authfile.c, potentially allowing local users to extract sensitive private-key information from a privilege-separated child process. The vulnerability has a CVSS score of 5.5, indicating a low attack complexity and local access requirement, with a high impact on confidentiality. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion is minimal, with only one mention found.