Advisories:rPSA-2006-0174

From rPath Wiki

rPath Security Advisory 2006-0174-1

Published: 2006-09-27

Products

• rPath Linux 1

Rating

Minor

Exposure Level Classification

Remote Deterministic Denial of Service

Updated Versions

• gnome-ssh-askpass=conary.rpath.com@rpl:1/4.2p1-2.2-1
• openssh=conary.rpath.com@rpl:1/4.2p1-2.2-1
• openssh-client=conary.rpath.com@rpl:1/4.2p1-2.2-1
• openssh-server=conary.rpath.com@rpl:1/4.2p1-2.2-1

rPath Issue Tracking System

• RPL-661

References

• CVE-2006-4924
• CVE-2006-4925

Description

Previous versions of the openssh package are vulnerable to a

remote denial of service attack that cause the server to consume

CPU when presented with certain data. They also have a bug (not

a vulnerability) that causes the client to crash harmlessly

instead of exiting cleanly under some attacks; this is not a

vulnerability but is also fixed in this update.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html