CVE-2008-4109
First published: Wed Sep 17 2008(Updated: )
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian Linux | =unknown-unknown | |
| Openbsd Openssh | <=4.3p2 | |
| Openbsd Openssh | =1.2 | |
| Openbsd Openssh | =1.2.1 | |
| Openbsd Openssh | =1.2.2 | |
| Openbsd Openssh | =1.2.3 | |
| Openbsd Openssh | =1.2.27 | |
| Openbsd Openssh | =1.3 | |
| Openbsd Openssh | =1.5 | |
| Openbsd Openssh | =1.5.7 | |
| Openbsd Openssh | =1.5.8 | |
| Openbsd Openssh | =2 | |
| Openbsd Openssh | =2.1 | |
| Openbsd Openssh | =2.1.1 | |
| Openbsd Openssh | =2.2 | |
| Openbsd Openssh | =2.3 | |
| Openbsd Openssh | =2.3.1 | |
| Openbsd Openssh | =2.5 | |
| Openbsd Openssh | =2.5.1 | |
| Openbsd Openssh | =2.5.2 | |
| Openbsd Openssh | =2.9 | |
| Openbsd Openssh | =2.9.9 | |
| Openbsd Openssh | =2.9.9p2 | |
| Openbsd Openssh | =2.9p1 | |
| Openbsd Openssh | =2.9p2 | |
| Openbsd Openssh | =3.0 | |
| Openbsd Openssh | =3.0.1 | |
| Openbsd Openssh | =3.0.1p1 | |
| Openbsd Openssh | =3.0.2 | |
| Openbsd Openssh | =3.0.2p1 | |
| Openbsd Openssh | =3.0p1 | |
| Openbsd Openssh | =3.1 | |
| Openbsd Openssh | =3.1p1 | |
| Openbsd Openssh | =3.2 | |
| Openbsd Openssh | =3.2.2 | |
| Openbsd Openssh | =3.2.2p1 | |
| Openbsd Openssh | =3.2.3p1 | |
| Openbsd Openssh | =3.3 | |
| Openbsd Openssh | =3.3p1 | |
| Openbsd Openssh | =3.4 | |
| Openbsd Openssh | =3.4p1 | |
| Openbsd Openssh | =3.5 | |
| Openbsd Openssh | =3.5p1 | |
| Openbsd Openssh | =3.6 | |
| Openbsd Openssh | =3.6.1 | |
| Openbsd Openssh | =3.6.1p1 | |
| Openbsd Openssh | =3.6.1p2 | |
| Openbsd Openssh | =3.7 | |
| Openbsd Openssh | =3.7.1 | |
| Openbsd Openssh | =3.7.1p1 | |
| Openbsd Openssh | =3.7.1p2 | |
| Openbsd Openssh | =3.8 | |
| Openbsd Openssh | =3.8.1 | |
| Openbsd Openssh | =3.8.1p1 | |
| Openbsd Openssh | =3.9 | |
| Openbsd Openssh | =3.9.1 | |
| Openbsd Openssh | =3.9.1p1 | |
| Openbsd Openssh | =4.0 | |
| Openbsd Openssh | =4.0p1 | |
| Openbsd Openssh | =4.1 | |
| Openbsd Openssh | =4.1p1 | |
| Openbsd Openssh | =4.2 | |
| Openbsd Openssh | =4.2p1 | |
| Openbsd Openssh | =4.3 | |
| Openbsd Openssh | =4.3p1 | |
| Debian Linux | =unknown-unknown | |
| Openbsd Openssh | <=4.6 | |
| Openbsd Openssh | =4.3p2 | |
| Openbsd Openssh | =4.4 | |
| Openbsd Openssh | =4.4p1 | |
| All of | ||
| Debian Linux | =unknown-unknown | |
| Any of | ||
| Openbsd Openssh | <=4.3p2 | |
| Openbsd Openssh | =1.2 | |
| Openbsd Openssh | =1.2.1 | |
| Openbsd Openssh | =1.2.2 | |
| Openbsd Openssh | =1.2.3 | |
| Openbsd Openssh | =1.2.27 | |
| Openbsd Openssh | =1.3 | |
| Openbsd Openssh | =1.5 | |
| Openbsd Openssh | =1.5.7 | |
| Openbsd Openssh | =1.5.8 | |
| Openbsd Openssh | =2 | |
| Openbsd Openssh | =2.1 | |
| Openbsd Openssh | =2.1.1 | |
| Openbsd Openssh | =2.2 | |
| Openbsd Openssh | =2.3 | |
| Openbsd Openssh | =2.3.1 | |
| Openbsd Openssh | =2.5 | |
| Openbsd Openssh | =2.5.1 | |
| Openbsd Openssh | =2.5.2 | |
| Openbsd Openssh | =2.9 | |
| Openbsd Openssh | =2.9.9 | |
| Openbsd Openssh | =2.9.9p2 | |
| Openbsd Openssh | =2.9p1 | |
| Openbsd Openssh | =2.9p2 | |
| Openbsd Openssh | =3.0 | |
| Openbsd Openssh | =3.0.1 | |
| Openbsd Openssh | =3.0.1p1 | |
| Openbsd Openssh | =3.0.2 | |
| Openbsd Openssh | =3.0.2p1 | |
| Openbsd Openssh | =3.0p1 | |
| Openbsd Openssh | =3.1 | |
| Openbsd Openssh | =3.1p1 | |
| Openbsd Openssh | =3.2 | |
| Openbsd Openssh | =3.2.2 | |
| Openbsd Openssh | =3.2.2p1 | |
| Openbsd Openssh | =3.2.3p1 | |
| Openbsd Openssh | =3.3 | |
| Openbsd Openssh | =3.3p1 | |
| Openbsd Openssh | =3.4 | |
| Openbsd Openssh | =3.4p1 | |
| Openbsd Openssh | =3.5 | |
| Openbsd Openssh | =3.5p1 | |
| Openbsd Openssh | =3.6 | |
| Openbsd Openssh | =3.6.1 | |
| Openbsd Openssh | =3.6.1p1 | |
| Openbsd Openssh | =3.6.1p2 | |
| Openbsd Openssh | =3.7 | |
| Openbsd Openssh | =3.7.1 | |
| Openbsd Openssh | =3.7.1p1 | |
| Openbsd Openssh | =3.7.1p2 | |
| Openbsd Openssh | =3.8 | |
| Openbsd Openssh | =3.8.1 | |
| Openbsd Openssh | =3.8.1p1 | |
| Openbsd Openssh | =3.9 | |
| Openbsd Openssh | =3.9.1 | |
| Openbsd Openssh | =3.9.1p1 | |
| Openbsd Openssh | =4.0 | |
| Openbsd Openssh | =4.0p1 | |
| Openbsd Openssh | =4.1 | |
| Openbsd Openssh | =4.1p1 | |
| Openbsd Openssh | =4.2 | |
| Openbsd Openssh | =4.2p1 | |
| Openbsd Openssh | =4.3 | |
| Openbsd Openssh | =4.3p1 | |
| All of | ||
| Debian Linux | =unknown-unknown | |
| Any of | ||
| Openbsd Openssh | <=4.6 | |
| Openbsd Openssh | =1.2 | |
| Openbsd Openssh | =1.2.1 | |
| Openbsd Openssh | =1.2.2 | |
| Openbsd Openssh | =1.2.3 | |
| Openbsd Openssh | =1.2.27 | |
| Openbsd Openssh | =1.3 | |
| Openbsd Openssh | =1.5 | |
| Openbsd Openssh | =1.5.7 | |
| Openbsd Openssh | =1.5.8 | |
| Openbsd Openssh | =2 | |
| Openbsd Openssh | =2.1 | |
| Openbsd Openssh | =2.1.1 | |
| Openbsd Openssh | =2.2 | |
| Openbsd Openssh | =2.3 | |
| Openbsd Openssh | =2.3.1 | |
| Openbsd Openssh | =2.5 | |
| Openbsd Openssh | =2.5.1 | |
| Openbsd Openssh | =2.5.2 | |
| Openbsd Openssh | =2.9 | |
| Openbsd Openssh | =2.9.9 | |
| Openbsd Openssh | =2.9.9p2 | |
| Openbsd Openssh | =2.9p1 | |
| Openbsd Openssh | =2.9p2 | |
| Openbsd Openssh | =3.0 | |
| Openbsd Openssh | =3.0.1 | |
| Openbsd Openssh | =3.0.1p1 | |
| Openbsd Openssh | =3.0.2 | |
| Openbsd Openssh | =3.0.2p1 | |
| Openbsd Openssh | =3.0p1 | |
| Openbsd Openssh | =3.1 | |
| Openbsd Openssh | =3.1p1 | |
| Openbsd Openssh | =3.2 | |
| Openbsd Openssh | =3.2.2 | |
| Openbsd Openssh | =3.2.2p1 | |
| Openbsd Openssh | =3.2.3p1 | |
| Openbsd Openssh | =3.3 | |
| Openbsd Openssh | =3.3p1 | |
| Openbsd Openssh | =3.4 | |
| Openbsd Openssh | =3.4p1 | |
| Openbsd Openssh | =3.5 | |
| Openbsd Openssh | =3.5p1 | |
| Openbsd Openssh | =3.6 | |
| Openbsd Openssh | =3.6.1 | |
| Openbsd Openssh | =3.6.1p1 | |
| Openbsd Openssh | =3.6.1p2 | |
| Openbsd Openssh | =3.7 | |
| Openbsd Openssh | =3.7.1 | |
| Openbsd Openssh | =3.7.1p1 | |
| Openbsd Openssh | =3.7.1p2 | |
| Openbsd Openssh | =3.8 | |
| Openbsd Openssh | =3.8.1 | |
| Openbsd Openssh | =3.8.1p1 | |
| Openbsd Openssh | =3.9 | |
| Openbsd Openssh | =3.9.1 | |
| Openbsd Openssh | =3.9.1p1 | |
| Openbsd Openssh | =4.0 | |
| Openbsd Openssh | =4.0p1 | |
| Openbsd Openssh | =4.1 | |
| Openbsd Openssh | =4.1p1 | |
| Openbsd Openssh | =4.2 | |
| Openbsd Openssh | =4.2p1 | |
| Openbsd Openssh | =4.3 | |
| Openbsd Openssh | =4.3p1 | |
| Openbsd Openssh | =4.3p2 | |
| Openbsd Openssh | =4.4 | |
| Openbsd Openssh | =4.4p1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678
- http://www.debian.org/security/2008/dsa-1638
- http://secunia.com/advisories/31885
- http://www.securitytracker.com/id?1020891
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
- http://secunia.com/advisories/32181
- http://secunia.com/advisories/32080
- http://www.ubuntu.com/usn/usn-649-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45202
- http://www.openwall.com/lists/oss-security/2024/07/01/3
- https://www.bleepingcomputer.com/news/security/new-regresshion-openssh-rce-bug-gives-root-on-linux-servers/
- https://www.theregister.com/2024/07/01/regresshion_openssh/
- https://www.zdnet.com/article/over-14m-servers-may-be-vulnerable-to-opensshs-regresshion-rce-flaw-heres-what-you-need-to-do/
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/type
- agent/remedy
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-6387
- alias/CVE-2006-5051
- alias/CVE-2008-4109
- collector/the-register
- source/The Register
- agent/references
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- collector/zdnet-article
- source/ZDNet
- vendor/debian
- canonical/debian linux
- version/debian linux/unknown-unknown
- vendor/openbsd
- canonical/openbsd openssh
- version/openbsd openssh/4.3p2
- version/openbsd openssh/1.2
- version/openbsd openssh/1.2.1
- version/openbsd openssh/1.2.2
- version/openbsd openssh/1.2.3
- version/openbsd openssh/1.2.27
- version/openbsd openssh/1.3
- version/openbsd openssh/1.5
- version/openbsd openssh/1.5.7
- version/openbsd openssh/1.5.8
- version/openbsd openssh/2
- version/openbsd openssh/2.1
- version/openbsd openssh/2.1.1
- version/openbsd openssh/2.2
- version/openbsd openssh/2.3
- version/openbsd openssh/2.3.1
- version/openbsd openssh/2.5
- version/openbsd openssh/2.5.1
- version/openbsd openssh/2.5.2
- version/openbsd openssh/2.9
- version/openbsd openssh/2.9.9
- version/openbsd openssh/2.9.9p2
- version/openbsd openssh/2.9p1
- version/openbsd openssh/2.9p2
- version/openbsd openssh/3.0
- version/openbsd openssh/3.0.1
- version/openbsd openssh/3.0.1p1
- version/openbsd openssh/3.0.2
- version/openbsd openssh/3.0.2p1
- version/openbsd openssh/3.0p1
- version/openbsd openssh/3.1
- version/openbsd openssh/3.1p1
- version/openbsd openssh/3.2
- version/openbsd openssh/3.2.2
- version/openbsd openssh/3.2.2p1
- version/openbsd openssh/3.2.3p1
- version/openbsd openssh/3.3
- version/openbsd openssh/3.3p1
- version/openbsd openssh/3.4
- version/openbsd openssh/3.4p1
- version/openbsd openssh/3.5
- version/openbsd openssh/3.5p1
- version/openbsd openssh/3.6
- version/openbsd openssh/3.6.1
- version/openbsd openssh/3.6.1p1
- version/openbsd openssh/3.6.1p2
- version/openbsd openssh/3.7
- version/openbsd openssh/3.7.1
- version/openbsd openssh/3.7.1p1
- version/openbsd openssh/3.7.1p2
- version/openbsd openssh/3.8
- version/openbsd openssh/3.8.1
- version/openbsd openssh/3.8.1p1
- version/openbsd openssh/3.9
- version/openbsd openssh/3.9.1
- version/openbsd openssh/3.9.1p1
- version/openbsd openssh/4.0
- version/openbsd openssh/4.0p1
- version/openbsd openssh/4.1
- version/openbsd openssh/4.1p1
- version/openbsd openssh/4.2
- version/openbsd openssh/4.2p1
- version/openbsd openssh/4.3
- version/openbsd openssh/4.3p1
- version/openbsd openssh/4.6
- version/openbsd openssh/4.4
- version/openbsd openssh/4.4p1