CVE-2006-5051

高 8.1CVE-2006-5051 · 27/09/2006 公開 · 16/06/2026 更新

要点

CVE-2006-5051 は openssh (openbsd) に影響する深刻度「高」 (CVSS 8.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：45.6%（全脆弱性の 98.8% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openssh openbsd	`≤ 4.4`	修正版なし

概要

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

参考情報

ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc · Broken Link
patches.sgi.com/support/free/security/advisories/20061001-01-P.asc · Broken Link
docs.info.apple.com/article.html · Broken Link
lists.apple.com/archives/security-announce/2007/Mar/msg00002.html · Mailing List
lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html · Mailing List
marc.info · Mailing List
openssh.org/txt/release-4.4 · Release Notes
secunia.com/advisories/22158 · Broken Link
secunia.com/advisories/22173 · Broken Link
secunia.com/advisories/22183 · Broken Link
secunia.com/advisories/22196 · Broken Link
secunia.com/advisories/22208 · Broken Link
secunia.com/advisories/22236 · Broken Link
secunia.com/advisories/22245 · Broken Link
secunia.com/advisories/22270 · Broken Link
secunia.com/advisories/22352 · Broken Link
secunia.com/advisories/22362 · Broken Link
secunia.com/advisories/22487 · Broken Link
secunia.com/advisories/22495 · Broken Link
secunia.com/advisories/22823 · Broken Link
secunia.com/advisories/22926 · Broken Link
secunia.com/advisories/23680 · Broken Link
secunia.com/advisories/24479 · Broken Link
secunia.com/advisories/24799 · Broken Link
secunia.com/advisories/24805 · Broken Link
security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc · Third Party Advisory
security.gentoo.org/glsa/glsa-200611-06.xml · Third Party Advisory
securitytracker.com/id · Broken Link
slackware.com/security/viewer.php · Broken Link
sourceforge.net/forum/forum.php · Broken Link
support.avaya.com/elmodocs2/security/ASA-2006-216.htm · Third Party Advisory
www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html · Broken Link
arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf · Broken Link
arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf · Broken Link
debian.org/security/2006/dsa-1189 · Mailing List
debian.org/security/2006/dsa-1212 · Broken Link
kb.cert.org/vuls/id/851340 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
novell.com/linux/security/advisories/2006_62_openssh.html · Broken Link
openbsd.org/errata.html · Release Notes
openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html · Broken Link
openwall.com/lists/oss-security/2024/07/01/3
openwall.com/lists/oss-security/2024/07/28/3
osvdb.org/29264 · Broken Link
redhat.com/support/errata/RHSA-2006-0697.html · Broken Link
redhat.com/support/errata/RHSA-2006-0698.html · Broken Link
securityfocus.com/bid/20241 · Broken Link
ubuntu.com/usn/usn-355-1 · Broken Link
us-cert.gov/cas/techalerts/TA07-072A.html · Third Party Advisory
vmware.com/support/vi3/doc/esx-3069097-patch.html · Broken Link
vmware.com/support/vi3/doc/esx-9986131-patch.html · Broken Link
vupen.com/english/advisories/2006/4018 · Broken Link
vupen.com/english/advisories/2006/4329 · Broken Link
vupen.com/english/advisories/2007/0930 · Broken Link
vupen.com/english/advisories/2007/1332 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/29254 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387 · Broken Link
openwall.com/lists/oss-security/2024/07/28/3

openssh のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン