Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openssh | — | Upgrade macOS to the latest versionApply OS X security update 2007-003 | Dec 16, 2011 | Sep 27, 2006 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Sep 27, 2006 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 27, 2013 |
| Freebsd | — | Upgrade opensshUpgrade openssh-portableUpgrade FreeBSD | Dec 10, 2025 | Sep 30, 2006 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Sep 27, 2006 |
| Suse | — | Upgrade e2fsprogs-32bitUpgrade openldap2-client-64bitUpgrade dbus-1-qt3-develUpgrade libattr-develUpgrade yast2-transferUpgrade dbus-1-glib-64bitUpgrade findutils-locateUpgrade filesystemUpgrade krb5-apps-clientsUpgrade dosfstoolsUpgrade yast2-tvUpgrade yast2-powertweakUpgrade binutils-x86Upgrade yast2-networkUpgrade yast2-storage-develUpgrade rugUpgrade bind-libs-x86Upgrade libzypp-zmd-backendUpgrade desktop-translationsUpgrade nfsidmapUpgrade parted-x86Upgrade xfsprogs-develUpgrade openldap2-client-32bitUpgrade yast2-mail-aliasesUpgrade dbus-1-pythonUpgrade rpmUpgrade microcode_ctlUpgrade yast2-hardware-detectionUpgrade yast2-installationUpgrade yast2-perl-bindingsUpgrade bind-utilsUpgrade yast2-updateUpgrade ncurses-devel-64bitUpgrade yast2-online-updateUpgrade yast2-ldap-clientUpgrade limal-perlUpgrade readline-x86Upgrade pcsc-liteUpgrade ncurses-x86Upgrade mailxUpgrade sedUpgrade yast2-mailUpgrade openldap2-devel-32bitUpgrade hal-gnomeUpgrade insservUpgrade limal-bootloaderUpgrade yast2-inetdUpgrade mkinitrdUpgrade e2fsprogsUpgrade krb5-serverUpgrade libattr-64bitUpgrade yast2-firewallUpgrade powersave-libsUpgrade terminfoUpgrade hal-64bitUpgrade ncurses-develUpgrade yast2-irdaUpgrade scsiUpgrade xscsiUpgrade libacl-devel-64bitUpgrade parted-32bitUpgrade atUpgrade powersave-libs-x86Upgrade libcom_err-32bitUpgrade e2fsprogs-64bitUpgrade CheckHardwareUpgrade udevUpgrade ncurses-32bitUpgrade krb5-docUpgrade bind-libs-32bitUpgrade yast2-samba-clientUpgrade wireless-toolsUpgrade partedUpgrade reiserfsUpgrade rpm-develUpgrade openldap2-clientUpgrade libcom_errUpgrade yast2-restoreUpgrade readline-devel-32bitUpgrade krb5-apps-serversUpgrade pciutilsUpgrade libacl-x86Upgrade e2fsprogs-devel-32bitUpgrade xntp-docUpgrade rpm-pythonUpgrade popt-devel-32bitUpgrade dbus-1-glib-x86Upgrade syslinuxUpgrade grepUpgrade yast2-runlevelUpgrade yast2-ntp-clientUpgrade perl-bootloaderUpgrade scpmUpgrade scpm-develUpgrade liby2util-develUpgrade yast2-storage-libUpgrade bashUpgrade liloUpgrade dbus-1-qt3Upgrade dmraidUpgrade dbus-1-develUpgrade poptUpgrade ldapcpplibUpgrade autoyast2Upgrade dbus-1-qt3-32bitUpgrade yast2-securityUpgrade ldapcpplib-develUpgrade readline-32bitUpgrade suseRegisterUpgrade zypperUpgrade update-desktop-filesUpgrade bind-libs-64bitUpgrade bind-libsUpgrade krb5Upgrade libcom_err-64bitUpgrade libacl-develUpgrade pciutils-devel-64bitUpgrade yast2-supportUpgrade hal-x86Upgrade yast2-profile-managerUpgrade zmd-develUpgrade module-init-toolsUpgrade libattr-x86Upgrade autoyast2-installationUpgrade popt-64bitUpgrade sudoUpgrade pwdutilsUpgrade dbus-1-32bitUpgrade openldap2-client-x86Upgrade binutils-32bitUpgrade readline-64bitUpgrade pam-64bitUpgrade readlineUpgrade bind-devel-64bitUpgrade findutilsUpgrade yast2-ldapUpgrade nfs-utilsUpgrade bind-chrootenvUpgrade yast2-storageUpgrade bind-develUpgrade e2fsprogs-devel-64bitUpgrade ulimitUpgrade binutilsUpgrade ncursesUpgrade openldap2Upgrade opensshUpgrade mcelogUpgrade yast2-backupUpgrade popt-devel-64bitUpgrade sysfsutilsUpgrade binutils-64bitUpgrade sysfsutils-x86Upgrade yast2-xmlUpgrade openldap2-back-metaUpgrade yast2-sysconfigUpgrade pam-devel-32bitUpgrade yast2-nis-clientUpgrade parted-develUpgrade pcsc-lite-develUpgrade bindUpgrade procinfoUpgrade coreutilsUpgrade hwinfo-develUpgrade readline-devel-64bitUpgrade yast2-printerUpgrade yast2-kerberos-clientUpgrade dbus-1-glib-32bitUpgrade liby2utilUpgrade pciutils-develUpgrade libattrUpgrade openssh-askpass-gnomeUpgrade libaclUpgrade dbus-1-javaUpgrade diffutilsUpgrade mdadmUpgrade multipath-toolsUpgrade krb5-develUpgrade yast2-coreUpgrade aclUpgrade zmd-inventoryUpgrade attrUpgrade yast2-slpUpgrade pam-x86Upgrade yast2-pkg-bindingsUpgrade parted-64bitUpgrade dbus-1-glibUpgrade portmapUpgrade dbus-1-64bitUpgrade syslogdUpgrade pam-modules-x86Upgrade dbus-1-qt3-x86Upgrade krb5-devel-32bitUpgrade yast2-power-managementUpgrade dbus-1Upgrade util-linuxUpgrade yast2-online-update-frontendUpgrade limalUpgrade krb5-clientUpgrade sysfsutils-32bitUpgrade powersave-libs-32bitUpgrade permissionsUpgrade openldap2-back-perlUpgrade yast2-core-develUpgrade popt-x86Upgrade libattr-32bitUpgrade pciutils-devel-32bitUpgrade dbus-1-x86Upgrade libattr-devel-64bitUpgrade screenUpgrade sysconfigUpgrade libacl-32bitUpgrade cpioUpgrade pam-32bitUpgrade hal-32bitUpgrade dbus-1-x11Upgrade klogdUpgrade pam-modulesUpgrade ncurses-64bitUpgrade coreutils-x86Upgrade libzyppUpgrade hwinfoUpgrade bash-x86Upgrade krb5-64bitUpgrade yast2-ncursesUpgrade yast2-repairUpgrade powersave-libs-64bitUpgrade yast2-tuneUpgrade pam-modules-32bitUpgrade dbus-1-gtkUpgrade e2fsprogs-develUpgrade yast2-storage-evmsUpgrade yast2-develUpgrade ncurses-devel-32bitUpgrade zmdUpgrade hal-develUpgrade yast2-countryUpgrade xfsprogsUpgrade aaa_baseUpgrade openssh-askpassUpgrade readline-develUpgrade openldap2-develUpgrade xntpUpgrade pam-develUpgrade autofsUpgrade dbus-1-monoUpgrade krb5-devel-64bitUpgrade iputilsUpgrade yast2-pamUpgrade yast2-vmUpgrade pamUpgrade halUpgrade openldap2-devel-64bitUpgrade libacl-64bitUpgrade yast2-usersUpgrade popt-32bitUpgrade pam-modules-64bitUpgrade bind-docUpgrade libzypp-develUpgrade yast2-bootloaderUpgrade krb5-32bitUpgrade yast2-trans-statsUpgrade pam-devel-64bitUpgrade sysvinitUpgrade libcom_err-x86Upgrade popt-develUpgrade sysfsutils-64bitUpgrade yast2Upgrade yast2-schemaUpgrade postfixUpgrade e2fsprogs-x86Upgrade krb5-x86Upgrade yast2-packagerUpgrade yast2-theme-NLDUpgrade dbus-1-qt3-64bitUpgrade yast2-nfs-clientUpgrade powersave-develUpgrade powersaveUpgrade cron | Feb 17, 2015 | Sep 27, 2006 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Sep 27, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub