CVE-2006-4924
HIGH 7.8EPSS 37.5%
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.
- CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 37.54% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2006-09-27
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/21923
- http://secunia.com/advisories/22091
- http://secunia.com/advisories/22116
- http://secunia.com/advisories/22158
- http://secunia.com/advisories/22164
- http://secunia.com/advisories/22183
- http://secunia.com/advisories/22196
- http://secunia.com/advisories/22208
- http://secunia.com/advisories/22236
- http://secunia.com/advisories/22245
- http://secunia.com/advisories/22270
- http://secunia.com/advisories/22298
- http://secunia.com/advisories/22352
- http://secunia.com/advisories/22362
- http://secunia.com/advisories/22487
- http://secunia.com/advisories/22495
- http://secunia.com/advisories/22823
- http://secunia.com/advisories/22926
- http://secunia.com/advisories/23038
- http://secunia.com/advisories/23241
- http://secunia.com/advisories/23340
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955
- http://www.debian.org/security/2006/dsa-1189
- http://www.debian.org/security/2006/dsa-1212
- http://www.securityfocus.com/bid/20216
- http://www.kb.cert.org/vuls/id/787448
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:179
- http://www.redhat.com/support/errata/RHSA-2006-0697.html
- http://www.redhat.com/support/errata/RHSA-2006-0698.html
- http://www.ubuntu.com/usn/usn-355-1