CVE-2013-4421

MITTEL 5.0CVE-2013-4421 · Published 25/10/2013 · updated 16/06/2026

Kurz gesagt

CVE-2013-4421 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in dropbear ssh (dropbear ssh project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.4%, höher als bei 93.7% aller Schwachstellen.
Abhilfe: auf 2013.59 oder neuer aktualisieren.

Package	Affected versions	Patched versions
dropbear ssh dropbear_ssh_project	`< 2013.59`	`2013.59`

Description

The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.

References

lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2013-10/msg00061.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2013-11/msg00046.html · Third Party Advisory
secunia.com/advisories/55173 · Third Party Advisory
openwall.com/lists/oss-security/2013/10/11/4 · Mailing List
securityfocus.com/bid/62958 · Third Party Advisory
matt.ucc.asn.au/dropbear/CHANGES · Vendor Advisory
secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f · Patch
support.citrix.com/article/CTX216642 · Third Party Advisory

Weitere Schwachstellen in dropbear ssh

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free