CVE-2006-4925 PUBLISHED CVSS 5 MEDIUM

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.

EPSS 3.37% · 87.3th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
3.37%
87.3th percentile

Affected Products

VendorProductVersions
openbsdopenssh4.5
n/an/an/a

Timeline

References

Open in Interactive Console →