The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openssh | Jul 30, 2024 | Dec 31, 2004 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Dec 5, 2012 | Dec 31, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub