CVE-2006-4924

OpenSSH <4.4 - DoS

Title source: llm

Description

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Tavis Ormandy · bashdosmultiple

https://www.exploit-db.com/exploits/2444

View Code ZIP pw:eip

References (79)

[Various Sources] ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc

[Various Sources] ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt

[Various Sources] http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability

[Issue Tracking] http://bugs.gentoo.org/show_bug.cgi?id=148228

[Vendor Advisory] http://docs.info.apple.com/article.html?artnum=305214

[Various Sources] http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112

[Mailing List] http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

[Mailing List] http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2

[Vendor Advisory] http://secunia.com/advisories/21923

[Vendor Advisory] http://secunia.com/advisories/22091

[Vendor Advisory] http://secunia.com/advisories/22116

[Vendor Advisory] http://secunia.com/advisories/22158

[Vendor Advisory] http://secunia.com/advisories/22164

[Vendor Advisory] http://secunia.com/advisories/22183

[Vendor Advisory] http://secunia.com/advisories/22196

[Vendor Advisory] http://secunia.com/advisories/22208

[Vendor Advisory] http://secunia.com/advisories/22236

[Vendor Advisory] http://secunia.com/advisories/22245

[Vendor Advisory] http://secunia.com/advisories/22270

[Vendor Advisory] http://secunia.com/advisories/22298

... and 59 more

Scores

EPSS 0.5432

EPSS Percentile 98.0%

Details

CWE

CWE-399

Status published

Products (50)

openbsd/openssh 1.2

openbsd/openssh 1.2.1

openbsd/openssh 1.2.2

openbsd/openssh 1.2.3

openbsd/openssh 1.2.27

openbsd/openssh 2.1

openbsd/openssh 2.1.1

openbsd/openssh 2.2

openbsd/openssh 2.3

openbsd/openssh 2.5

... and 40 more

Published Sep 27, 2006

Tracked Since Feb 18, 2026