CVE-2008-4109
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 29%
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
Produtos afetados
n/a · n/aReferências
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.htmlhttp://secunia.com/advisories/31885http://secunia.com/advisories/32080http://secunia.com/advisories/32181https://exchange.xforce.ibmcloud.com/vulnerabilities/45202http://www.debian.org/security/2008/dsa-1638http://www.openwall.com/lists/oss-security/2024/07/01/3http://www.securitytracker.com/id?1020891http://www.ubuntu.com/usn/usn-649-1