OpenSSH 6.1, and prior versions, Vulnerable to Connection-slot exhaustion (CVE-2010-5107)
Issue
- OpenSSH 6.1, and prior versions, Vulnerable to Connection-slot exhaustion (CVE-2010-5107)
When establishing TCP connectivity, the enforcement of a fixed time limit prior to login completion renders OpenSSH 6.1 (and earlier versions) susceptible to a connection-slot exhaustion based Denial of Service attack.
Environment
- Red Hat Enterprise Linux (RHEL) 5
- Red Hat Enterprise Virtualization (RHEV) 3
- Red Hat Enterprise Linux (RHEL) Desktop (v. 6)
- Red Hat Enterprise Linux (RHEL) HPC Node (v. 6)
- Red Hat Enterprise Linux (RHEL) Server (v. 6)
- Red Hat Enterprise Linux (RHEL) Workstation (v. 6)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
