CVE-2008-4109

Home/CVE/A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributi

CVE

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributi

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch.

before 4.6p1-1 on sid and lenny.

and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.

MEDIUM · CVSS 5 EPSS 0.01128

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules10 YARA rules0

▤

Affected Products & Versions

openbsd openssh<= 4.3p2

openbsd opensshall versions

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

productcriticalLinux Reverse Shell Indicator

producthighCommunication To LocaltoNet Tunneling Service Initiated - Linux

producthighPotentially Suspicious Malware Callback Communication - Linux

producthighLinux Crypto Mining Pool Connections

producthighCommunication To Ngrok Tunneling Service - Linux

producthighLinux Crypto Mining Indicators

Show all 10 top matches

producthighShell Execution GCC - Linux

producthighShell Execution via Rsync - Linux

productmediumSuspicious OpenSSH Daemon Error

productmediumOpenSSH Server Listening On Socket

▣