CVE-2006-4924

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 27 Sept 2006, 01:00
Last modified:07 Aug 2024, 19:32

Vulnerability Summary

Overall Risk (default)
high
52/100
CVSS Score
7.8 HIGH
v2.0 (nvd)
EPSS Score
54.32% CRITICAL
54% probability +6.37%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

27 Sept 2006, 01:00
Published
Vulnerability first disclosed
07 Aug 2024, 19:32
Last Modified
Vulnerability information updated

Description

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

CVSS Metrics

  • v2.0•HIGH•Score: 7.8AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 54.32%• Percentile: 98%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • openbsd•openssh

    1.2 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.27 | 2.1 | 2.1.1 | 2.2 | 2.3 | 2.5 | 2.5.1 | 2.5.2 | 2.9 | 2.9.9 | 2.9.9p2 | 2.9p1 | 2.9p2 | 3.0 | 3.0.1 | 3.0.1p1 | 3.0.2 | 3.0.2p1 | 3.0p1 | 3.1 | 3.1p1 | 3.2 | 3.2.2 | 3.2.2p1 | 3.2.3p1 | 3.3 | 3.3p1 | 3.4 | 3.4p1 | 3.5 | 3.5p1 | 3.6 | 3.6.1 | 3.6.1p1 | 3.6.1p2 | 3.7 | 3.7.1 | 3.7.1p1 | 3.7.1p2 | 3.8 | 3.8.1 | 3.8.1p1 | 3.9 | 3.9.1 | 3.9.1p1 | 4.0 | 4.0p1 | 4.1p1 | 4.2 | 4.2p1 | 4.3 | 4.3p1

References (79)