CVE-2006-4924

Опубликовано: 27 сент. 2006

Источник: nvd

CVSS2: 7.8

EPSS Средний

Описание

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

Ссылки

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc
ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability
http://bugs.gentoo.org/show_bug.cgi?id=148228
http://docs.info.apple.com/article.html?artnum=305214
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2
http://secunia.com/advisories/21923
Vendor Advisory
http://secunia.com/advisories/22091
Vendor Advisory
http://secunia.com/advisories/22116
Vendor Advisory
http://secunia.com/advisories/22158
Vendor Advisory
http://secunia.com/advisories/22164
Vendor Advisory
http://secunia.com/advisories/22183
Vendor Advisory
http://secunia.com/advisories/22196
Vendor Advisory
http://secunia.com/advisories/22208
Vendor Advisory
http://secunia.com/advisories/22236
Vendor Advisory
http://secunia.com/advisories/22245
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.45288

Средний

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2006-4924

ubuntu

больше 18 лет назад

CVE-2006-4924

redhat

почти 19 лет назад

CVE-2006-4924

debian

больше 18 лет назад

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, all ...

GHSA-8x5c-jhv9-65x6

github

около 3 лет назад

BDU:2015-09536

fstec

больше 18 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 97%

0.45288

Средний

7.8 High

CVSS2

Дефекты

CWE-399