Double Free in Apple Mac OS X
CVE-2006-5051
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
Vulnerability class: Double Free
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.450 (98.8th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.450 · newest: 0.450 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security.freebsd.org/advisories/FreeBSD-SA-06:22.openssh.asc (vendor-advisory, Third Party Advisory)
- sourceforge.net/forum/forum.php (Broken Link)
- secunia.com/advisories/22270 (Broken Link, Vendor Advisory, third-party-advisory)
- www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf (Broken Link)
- www.ubuntu.com/usn/usn-355-1 (vendor-advisory, Broken Link)
- lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html (mailing-list, Mailing List)
- www.vmware.com/support/vi3/doc/esx-3069097-patch.html (Broken Link)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:11387 (signature, vdb-entry, Broken Link)
- openssh.org/txt/release-4.4 (Release Notes)
- secunia.com/advisories/24805 (Broken Link, Vendor Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2006-5051?
- CVE-2006-5051 is a high-severity vulnerability in Apple Mac OS X, classified under Double Free. CVSS score: 8.1/10. Published 2006-09-27.
- How severe is CVE-2006-5051?
- High severity. CVSS v3 base score is 8.1 out of 10.
- Is CVE-2006-5051 known to be exploited?
- 21 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.