REDHAT-BUG-2480684: High severity OpenSSH vulnerability
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the SSH server/client so that unsolicited global request responses are discarded (not processed or buffered), preventing the internal buffer from filling and blocking the read loop.
SSH implementation (global request responses handling) Discard unsolicited global request responses = enabled
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2480684?
The severity of REDHAT-BUG-2480684 is classified as high with a score of 7.
What type of vulnerability is REDHAT-BUG-2480684?
REDHAT-BUG-2480684 is a resource leak vulnerability due to malicious SSH peers sending unsolicited global request responses.
How does REDHAT-BUG-2480684 affect OpenSSH?
REDHAT-BUG-2480684 can block the connection's read loop, potentially leading to a resource leak for each connection.
How do I fix REDHAT-BUG-2480684?
To fix REDHAT-BUG-2480684, ensure you update your OpenSSH installation to the latest version that discards unsolicited global responses.
What should I do if I am affected by REDHAT-BUG-2480684?
If affected by REDHAT-BUG-2480684, it is recommended to apply the latest security patches provided by Red Hat immediately.