CVE-2006-1206

None

CVSS

—

EPSS

11.7%

Published

Mar 14, 2006

CISA due date

—

The record

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.

Affected packages

Ecosystem	Package	Fixed
Debian:11	dropbear	0.48-1
Debian:12	dropbear	0.48-1
Debian:13	dropbear	0.48-1

Related vulnerabilities

CVE-2016-7406 Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to… Also affects dropbear
CVE-2016-3116 CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated… Also affects dropbear