System	Score	Found at
cvssv3	6.6	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03254	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03341	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.03341	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.05838	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
epss	0.05838	https://api.first.org/data/v1/epss?cve=CVE-2016-10009
cvssv2	4.6	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
archlinux	Medium	https://security.archlinux.org/AVG-110

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json
		https://api.first.org/data/v1/epss?cve=CVE-2016-10009
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1406269		https://bugzilla.redhat.com/show_bug.cgi?id=1406269
848714		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714
ASA-201612-20		https://security.archlinux.org/ASA-201612-20
AVG-110		https://security.archlinux.org/AVG-110
CVE-2016-10009	Exploit	https://bugs.chromium.org/p/project-zero/issues/detail?id=1009
CVE-2016-10009	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt
RHSA-2017:2029		https://access.redhat.com/errata/RHSA-2017:2029
USN-3538-1		https://usn.ubuntu.com/3538-1/

Data source	Exploit-DB
Date added	Dec. 23, 2016
Description	OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading
Ransomware campaign use	Known
Source publication date	Dec. 23, 2016
Exploit type	remote
Platform	linux
Source update date	Dec. 23, 2016
Source URL	https://bugs.chromium.org/p/project-zero/issues/detail?id=1009

Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Percentile	0.86646
EPSS Score	0.03254
Published At	July 30, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:28:58.683070+00:00	Alpine Linux Importer	Import	https://secdb.alpinelinux.org/v3.4/main.json	37.0.0