PT-2006-1034 · Suse+2 · Opensuse+2
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
openssh-askpass versions (affected versions not specified)
openSUSE versions (affected versions not specified)
Description:
The issue concerns multiple vulnerabilities in the openssh-askpass package of the openSUSE operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Specifically, a problem in packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH SUCCESS before NEWKEYS, which causes
newkeys[mode] to be NULL.Recommendations:
For openssh-askpass, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For openSUSE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Opensuse
Openssh-Askpass