Vulnerability in OpenBSD OpenSSH
CVE-2008-4109
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.284 (98.1th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.284 · newest: 0.284 · change: 0.000
Affected products
- OpenBSD OpenSSH — versions 1.2, 1.2.1, 1.2.2
- Debian Linux
Weakness classification (CWE)
Public proof-of-concept exploits
- bigb0x/CVE-2024-6387
- David-M-Berry/openssh-cve-discovery
- Passyed/regreSSHion-Fix
- TAM-K592/CVE-2024-6387
- almogopp/OpenSSH-CVE-2024-6387-Fix
- azurejoga/CVE-2024-6387-how-to-fix
- CVEDB/awesome-cve-repo
- edsonjt81/https-github.com-gotr00t0day-OpenSSH-Scanner
- invaderslabs/regreSSHion-CVE-2024-6387-
- kalvin-net/NoLimit-Secu-RegreSSHion
References
- www.ubuntu.com/usn/usn-649-1 (vendor-advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/45202 (vdb-entry)
- secunia.com/advisories/31885 (third-party-advisory)
- www.securitytracker.com/id (vdb-entry)
- www.debian.org/security/2008/dsa-1638 (vendor-advisory, Patch)
- lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html (vendor-advisory)
- secunia.com/advisories/32080 (third-party-advisory)
- bugs.debian.org/cgi-bin/bugreport.cgi
- secunia.com/advisories/32181 (third-party-advisory)
- www.openwall.com/lists/oss-security/2024/07/01/3 (mailing-list)
Frequently asked questions
- What is CVE-2008-4109?
- CVE-2008-4109 is a vulnerability in OpenBSD OpenSSH, classified under CWE-264. Published 2008-09-18.
- Is CVE-2008-4109 known to be exploited?
- 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.