PT-2013-5008 · Dropbear · Dropbear Ssh Server

Publicado 2013-10-25 · Atualizado 2018-10-30 · CVE-2013-4421

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dropbear SSH Server versions prior to 2013.59

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a compressed packet with a large decompressed size.

Recommendations For versions prior to 2013.59, update to version 2013.59 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2013-4421

MGASA-2013-0318

Produtos afetados

Dropbear Ssh Server

Referências · 17

• http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-4421 · Aviso do Fabricante
• http://secunia.com/advisories/55173 · Nota
• https://matt.ucc.asn.au/dropbear/CHANGES · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html · Aviso do Fabricante
• https://support.citrix.com/article/CTX216642 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=11442 · Nota
• http://openwall.com/lists/oss-security/2013/10/11/4 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html · Aviso do Fabricante
• https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f · Correção
• https://osv.dev/vulnerability/MGASA-2013-0318 · Aviso do Fabricante
• http://securityfocus.com/bid/62958 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-4421 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4421 · Aviso do Fabricante