CVE-2008-4109

Published: Sep 18, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.

Affected (68)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Openbsd Openssh	Up to 4.3p2

Running on/with	Platform Versions
Debian Linux	Version unknown unknown

Configuration B

67 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Openbsd Openssh	Up to 4.6
Openbsd Openssh	Version 1.2.1
Openbsd Openssh	Version 1.2.27
Openbsd Openssh	Version 1.2.2
Openbsd Openssh	Version 1.2.3
Openbsd Openssh	Version 1.2
Openbsd Openssh	Version 1.3
Openbsd Openssh	Version 1.5.7
Openbsd Openssh	Version 1.5.8
Openbsd Openssh	Version 1.5
Openbsd Openssh	Version 2.1.1
Openbsd Openssh	Version 2.1
Openbsd Openssh	Version 2.2
Openbsd Openssh	Version 2.3.1
Openbsd Openssh	Version 2.3
Openbsd Openssh	Version 2.5.1
Openbsd Openssh	Version 2.5.2
Openbsd Openssh	Version 2.5
Openbsd Openssh	Version 2.9.9
Openbsd Openssh	Version 2.9.9p2
Openbsd Openssh	Version 2.9
Openbsd Openssh	Version 2.9p1
Openbsd Openssh	Version 2.9p2
Openbsd Openssh	Version 2
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1
Openbsd Openssh	Version 3.4
Openbsd Openssh	Version 3.4p1
Openbsd Openssh	Version 3.5
Openbsd Openssh	Version 3.5p1
Openbsd Openssh	Version 3.6.1
Openbsd Openssh	Version 3.6.1p1
Openbsd Openssh	Version 3.6.1p2
Openbsd Openssh	Version 3.6
Openbsd Openssh	Version 3.7.1
Openbsd Openssh	Version 3.7.1p1
Openbsd Openssh	Version 3.7.1p2
Openbsd Openssh	Version 3.7
Openbsd Openssh	Version 3.8.1
Openbsd Openssh	Version 3.8.1p1
Openbsd Openssh	Version 3.8
Openbsd Openssh	Version 3.9.1
Openbsd Openssh	Version 3.9.1p1
Openbsd Openssh	Version 3.9
Openbsd Openssh	Version 4.0
Openbsd Openssh	Version 4.0p1
Openbsd Openssh	Version 4.1
Openbsd Openssh	Version 4.1p1
Openbsd Openssh	Version 4.2
Openbsd Openssh	Version 4.2p1
Openbsd Openssh	Version 4.3
Openbsd Openssh	Version 4.3p1
Openbsd Openssh	Version 4.3p2
Openbsd Openssh	Version 4.4
Openbsd Openssh	Version 4.4p1