p PatchFirst

CVE-2006-0883

CVE-2006-0883

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to cause a denial of service (client connection refusal) by connecting multiple times to the SSH server, waiting for the password prompt, then disconnecting.

EPSS 1.9% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.8.1p1-4

    Update to 1:3.8.1p1-4

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.8.1p1-4

    Update to 1:3.8.1p1-4

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.8.1p1-4

    Update to 1:3.8.1p1-4

Original sources

Check your server →