CVE-2010-5107: High severity OpenBSD OpenSSH vulnerability
A denial of service flaw was found in the way default server configuration of OpenSSH, a open source implementation of SSH protocol versions 1 and 2, performed management of its connection slot. A remote attacker could use this flaw to cause connection slot exhaustion on the server.
References: [1] http://seclists.org/oss-sec/2012/q1/1 [2] http://www.openwall.com/lists/oss-security/2013/02/06/5 [3] http://www.openwall.com/lists/oss-security/2013/02/07/3
Relevant upstream patches: [4] http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234 [5] http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshdconfig.5?r1=1.156#rev1.156 [6] http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshdconfig?r1=1.89#rev1.89
Other sources
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5107?
The severity of CVE-2010-5107 is considered moderate due to its potential to cause denial of service through connection slot exhaustion.
How do I fix CVE-2010-5107?
To fix CVE-2010-5107, it is recommended to update OpenSSH to version 6.3 or later.
What systems are affected by CVE-2010-5107?
CVE-2010-5107 affects multiple versions of OpenSSH up to 6.2 and several older versions spanning from 1.2 to 6.2.
Can CVE-2010-5107 be exploited remotely?
Yes, CVE-2010-5107 can be exploited remotely by an attacker to exhaust the connection slots on the affected OpenSSH server.
Is there a workaround for CVE-2010-5107?
A workaround for CVE-2010-5107 includes configuring the OpenSSH server to limit concurrent connections from the same IP address.