OpenSSH 6.1, and prior versions, Vulnerable to Connection-slot exhaustion (CVE-2010-5107)

Solution Verified - Updated -

Issue

  • OpenSSH 6.1, and prior versions, Vulnerable to Connection-slot exhaustion (CVE-2010-5107)
    When establishing TCP connectivity, the enforcement of a fixed time limit prior to login completion renders OpenSSH 6.1 (and earlier versions) susceptible to a connection-slot exhaustion based Denial of Service attack.

Environment

  • Red Hat Enterprise Linux (RHEL) 5
  • Red Hat Enterprise Virtualization (RHEV) 3
  • Red Hat Enterprise Linux (RHEL) Desktop (v. 6)
  • Red Hat Enterprise Linux (RHEL) HPC Node (v. 6)
  • Red Hat Enterprise Linux (RHEL) Server (v. 6)
  • Red Hat Enterprise Linux (RHEL) Workstation (v. 6)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.