CVE-2010-5107: openbsd openssh Uncontrolled Resource Consumption

CVSS: 7.5v3.1HighModified

AliasesRHSA-2013:1591DEBIAN-CVE-2010-5107

Published 07-03-2013Last modified 29-05-2026

Vulnerability summary

CVE-2010-5107 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in openbsd openssh. EPSS estimates a 16.51% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

16.51%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2013:1527

Timeline

07-03-2013
PublishedVulnerability first disclosed.
29-05-2026
Last modifiedVulnerability information updated.

Description

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.17.5v2.05.0

EPSS trend

Probability

16.51%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.51% on 19-09-2026

19-09-202619-10-2026

EPSS score

16.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.

Affected systems

Redhat7 products

openssh< 0:5.3p1-94.el6
openssh-askpass< 0:5.3p1-94.el6
openssh-clients< 0:5.3p1-94.el6
openssh-debuginfo< 0:5.3p1-94.el6
openssh-ldap< 0:5.3p1-94.el6

Show all 7

Debian1 product

openssh< 1:6.0p1-4

Openbsd1 product

openssh≤ 6.1 | 1.2 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.27 | 1.3 | 1.5 | 1.5.7 | 1.5.8 | 2.1 | 2.1.1 | 2.2 | 2.3 | 2.3.1 | 2.5 | 2.5.1 | 2.5.2 | 2.9 | 2.9.9 | 2.9.9p2 | 2.9p1 | 2.9p2 | 3.0 | 3.0.1 | 3.0.1p1 | 3.0.2 | 3.0.2p1 | 3.0p1 | 3.1 | 3.1p1 | 3.2 | 3.2.2 | 3.2.2p1 | 3.2.3p1 | 3.3 | 3.3p1 | 3.4 | 3.4p1 | 3.5 | 3.5p1 | 3.6 | 3.6.1 | 3.6.1p1 | 3.6.1p2 | 3.7 | 3.7.1 | 3.7.1p1 | 3.7.1p2 | 3.8 | 3.8.1 | 3.8.1p1 | 3.9 | 3.9.1 | 3.9.1p1 | 4.0 | 4.0p1 | 4.1 | 4.1p1 | 4.2 | 4.2p1 | 4.3 | 4.3p1 | 4.3p2 | 4.4 | 4.4p1 | 4.5 | 4.6 | 4.7 | 4.8 | 4.9 | 5.0 | 5.1 | 5.2 | 5.3 | 5.4 | 5.5 | 5.6 | 5.7 | 5.8 | 5.8p2 | 5.9 | 6.0

3 vendors · 9 products