CVE-2013-4421: Medium severity dropbear ssh vulnerability
Published Oct 25, 2013
·Updated
The bufdecompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.
Affected Software
1 affected component
Dropbear Ssh Project Dropbear Ssh<2013.59
Remediation
Patch Available
Event History
Oct 25, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4421?
CVE-2013-4421 has a severity rating of medium due to its potential to cause denial of service.
2
How do I fix CVE-2013-4421?
To fix CVE-2013-4421, upgrade to Dropbear SSH version 2013.59 or later.
3
What type of attack does CVE-2013-4421 enable?
CVE-2013-4421 enables a denial of service attack through excessive memory consumption by handling large compressed packets.
4
Which versions of Dropbear SSH are affected by CVE-2013-4421?
Dropbear SSH versions prior to 2013.59 are affected by CVE-2013-4421.
5
Is CVE-2013-4421 a remote vulnerability?
Yes, CVE-2013-4421 allows remote attackers to exploit the vulnerability.