p PatchFirst

CVE-2004-2069

CVE-2004-2069

This page contains facts from public vulnerability sources. Check the original advisory before updating.

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).

EPSS 3.4% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1

    Update to 1:3.8p1

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1

    Update to 1:3.8p1

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1

    Update to 1:3.8p1

Original sources

Check your server →