Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openssh | — | Apply OS X security update 2007-003Upgrade macOS to the latest version | Dec 16, 2011 | Sep 27, 2006 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Sep 27, 2006 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 27, 2013 |
| Freebsd | — | Upgrade openssh-portableUpgrade opensshUpgrade FreeBSD | Dec 10, 2025 | Sep 30, 2006 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Sep 27, 2006 |
| Suse | — | Upgrade bind-libs-32bitUpgrade krb5-docUpgrade terminfoUpgrade openldap2-devel-32bitUpgrade libzypp-zmd-backendUpgrade binutils-32bitUpgrade bind-libs-x86Upgrade hal-x86Upgrade yast2-installationUpgrade yast2-samba-clientUpgrade yast2-storageUpgrade yast2-restoreUpgrade openldap2-client-64bitUpgrade libacl-develUpgrade partedUpgrade dbus-1-qt3-develUpgrade hal-64bitUpgrade parted-32bitUpgrade dbus-1-32bitUpgrade desktop-translationsUpgrade ldapcpplibUpgrade bind-devel-64bitUpgrade yast2-transferUpgrade grepUpgrade wireless-toolsUpgrade rpm-pythonUpgrade dbus-1-glib-64bitUpgrade libcom_err-32bitUpgrade libacl-x86Upgrade popt-64bitUpgrade rpmUpgrade dbus-1-pythonUpgrade filesystemUpgrade yast2-storage-libUpgrade findutils-locateUpgrade udevUpgrade pciutils-devel-64bitUpgrade pam-64bitUpgrade suseRegisterUpgrade bind-libsUpgrade ncurses-32bitUpgrade bashUpgrade dbus-1-qt3Upgrade liloUpgrade atUpgrade scsiUpgrade bind-libs-64bitUpgrade yast2-securityUpgrade dosfstoolsUpgrade scpmUpgrade krb5Upgrade libcom_errUpgrade rpm-develUpgrade yast2-storage-develUpgrade ncurses-devel-64bitUpgrade yast2-updateUpgrade nfsidmapUpgrade yast2-hardware-detectionUpgrade zypperUpgrade pcsc-liteUpgrade xntp-docUpgrade poptUpgrade yast2-ldapUpgrade powersave-libsUpgrade yast2-tvUpgrade yast2-runlevelUpgrade zmd-develUpgrade krb5-apps-clientsUpgrade libattr-x86Upgrade limal-perlUpgrade yast2-perl-bindingsUpgrade binutils-x86Upgrade bind-chrootenvUpgrade e2fsprogs-64bitUpgrade dbus-1-qt3-32bitUpgrade xfsprogs-develUpgrade autoyast2Upgrade rugUpgrade openldap2-client-x86Upgrade syslinuxUpgrade findutilsUpgrade CheckHardwareUpgrade e2fsprogsUpgrade scpm-develUpgrade update-desktop-filesUpgrade libcom_err-64bitUpgrade dbus-1-develUpgrade readline-32bitUpgrade dmraidUpgrade dbus-1-glib-x86Upgrade krb5-serverUpgrade yast2-firewallUpgrade readlineUpgrade yast2-mail-aliasesUpgrade ldapcpplib-develUpgrade yast2-ldap-clientUpgrade liby2util-develUpgrade yast2-ntp-clientUpgrade pwdutilsUpgrade perl-bootloaderUpgrade yast2-networkUpgrade e2fsprogs-devel-32bitUpgrade module-init-toolsUpgrade pciutilsUpgrade yast2-profile-managerUpgrade autoyast2-installationUpgrade openldap2-client-32bitUpgrade yast2-powertweakUpgrade ncurses-x86Upgrade insservUpgrade yast2-inetdUpgrade reiserfsUpgrade openldap2-clientUpgrade readline-devel-32bitUpgrade e2fsprogs-32bitUpgrade parted-x86Upgrade nfs-utilsUpgrade limal-bootloaderUpgrade popt-devel-32bitUpgrade hal-gnomeUpgrade sedUpgrade libattr-64bitUpgrade xscsiUpgrade mailxUpgrade yast2-supportUpgrade mkinitrdUpgrade microcode_ctlUpgrade bind-utilsUpgrade powersave-libs-x86Upgrade readline-64bitUpgrade yast2-online-updateUpgrade sudoUpgrade ncurses-develUpgrade libacl-devel-64bitUpgrade bind-develUpgrade libattr-develUpgrade yast2-irdaUpgrade yast2-mailUpgrade krb5-apps-serversUpgrade readline-x86Upgrade openssh-askpassUpgrade yast2-core-develUpgrade syslogdUpgrade hal-develUpgrade dbus-1-glibUpgrade aclUpgrade xfsprogsUpgrade sysfsutilsUpgrade libacl-64bitUpgrade popt-develUpgrade krb5-devel-64bitUpgrade dbus-1-x86Upgrade klogdUpgrade aaa_baseUpgrade libattr-devel-64bitUpgrade yast2-storage-evmsUpgrade dbus-1-x11Upgrade yast2-coreUpgrade yast2-pkg-bindingsUpgrade krb5-develUpgrade coreutils-x86Upgrade dbus-1-monoUpgrade hwinfoUpgrade pam-modules-32bitUpgrade yast2-develUpgrade krb5-x86Upgrade ulimitUpgrade pam-x86Upgrade yast2-theme-NLDUpgrade yast2-tuneUpgrade pam-modulesUpgrade sysfsutils-64bitUpgrade sysvinitUpgrade popt-32bitUpgrade pam-develUpgrade yast2-nfs-clientUpgrade iputilsUpgrade powersaveUpgrade yast2-usersUpgrade libattrUpgrade pciutils-develUpgrade bind-docUpgrade pcsc-lite-develUpgrade util-linuxUpgrade xntpUpgrade screenUpgrade readline-develUpgrade yast2-bootloaderUpgrade readline-devel-64bitUpgrade dbus-1-javaUpgrade cronUpgrade dbus-1-64bitUpgrade multipath-toolsUpgrade halUpgrade krb5-64bitUpgrade attrUpgrade yast2-online-update-frontendUpgrade parted-64bitUpgrade krb5-clientUpgrade yast2Upgrade hwinfo-develUpgrade bash-x86Upgrade openssh-askpass-gnomeUpgrade sysfsutils-x86Upgrade yast2-nis-clientUpgrade yast2-kerberos-clientUpgrade yast2-trans-statsUpgrade dbus-1Upgrade ncursesUpgrade libacl-32bitUpgrade zmd-inventoryUpgrade pam-32bitUpgrade e2fsprogs-devel-64bitUpgrade pam-modules-x86Upgrade opensshUpgrade ncurses-devel-32bitUpgrade e2fsprogs-x86Upgrade parted-develUpgrade powersave-libs-32bitUpgrade libcom_err-x86Upgrade coreutilsUpgrade openldap2-develUpgrade openldap2-back-metaUpgrade krb5-devel-32bitUpgrade pam-modules-64bitUpgrade popt-x86Upgrade yast2-backupUpgrade liby2utilUpgrade dbus-1-glib-32bitUpgrade pamUpgrade e2fsprogs-develUpgrade openldap2-back-perlUpgrade mcelogUpgrade portmapUpgrade libzypp-develUpgrade yast2-packagerUpgrade procinfoUpgrade binutils-64bitUpgrade powersave-libs-64bitUpgrade yast2-ncursesUpgrade yast2-printerUpgrade binutilsUpgrade yast2-sysconfigUpgrade ncurses-64bitUpgrade hal-32bitUpgrade yast2-slpUpgrade popt-devel-64bitUpgrade openldap2Upgrade sysconfigUpgrade pciutils-devel-32bitUpgrade yast2-power-managementUpgrade postfixUpgrade libattr-32bitUpgrade pam-devel-32bitUpgrade yast2-countryUpgrade zmdUpgrade libzyppUpgrade pam-devel-64bitUpgrade powersave-develUpgrade yast2-pamUpgrade autofsUpgrade openldap2-devel-64bitUpgrade yast2-xmlUpgrade dbus-1-qt3-x86Upgrade diffutilsUpgrade cpioUpgrade yast2-repairUpgrade libaclUpgrade krb5-32bitUpgrade dbus-1-gtkUpgrade yast2-vmUpgrade limalUpgrade yast2-schemaUpgrade permissionsUpgrade bindUpgrade sysfsutils-32bitUpgrade mdadmUpgrade dbus-1-qt3-64bit | Feb 17, 2015 | Sep 27, 2006 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Sep 27, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub