CVE-2006-5051
High · 8.1CVSS
8.1
EPSS
45.0%
Published
Sep 27, 2006
CISA due date
—
The record
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | openssh | 0 | 1:4.6p1-1 |
| Debian:11 | openssh | 0 | 1:4.6p1-1 |
| Debian:12 | openssh | 0 | 1:4.6p1-1 |
| Debian:13 | openssh | 0 | 1:4.6p1-1 |
| Debian:14 | openssh | 0 | 1:4.6p1-1 |
| Debian:3.1 | openssh | 0 | 1:3.8.1p1-8.sarge.6 |
| Debian:3.1 | openssh-krb5 | 0 | 3.8.1p1-7sarge1 |
| Debian:4.0 | openssh | 0 | 1:4.3p2-9etch3 |
| Red Hat:enterprise_linux:2.1::as | openssh | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::as | openssh-askpass | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::as | openssh-askpass-gnome | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::as | openssh-clients | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::as | openssh-server | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::aw | openssh | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::aw | openssh-askpass | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::aw | openssh-askpass-gnome | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::aw | openssh-clients | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::aw | openssh-server | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::es | openssh | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::es | openssh-askpass | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::es | openssh-askpass-gnome | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::es | openssh-clients | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::es | openssh-server | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::ws | openssh | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::ws | openssh-askpass | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::ws | openssh-askpass-gnome | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::ws | openssh-clients | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:2.1::ws | openssh-server | 0 | 0:3.1p1-21 |
| Red Hat:enterprise_linux:3::as | openssh | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::as | openssh-askpass | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::as | openssh-askpass-gnome | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::as | openssh-clients | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::as | openssh-debuginfo | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::as | openssh-server | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh-askpass | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh-askpass-gnome | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh-clients | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh-debuginfo | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::desktop | openssh-server | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh-askpass | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh-askpass-gnome | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh-clients | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh-debuginfo | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::es | openssh-server | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh-askpass | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh-askpass-gnome | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh-clients | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh-debuginfo | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:3::ws | openssh-server | 0 | 0:3.6.1p2-33.30.12 |
| Red Hat:enterprise_linux:4::as | openssh | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::as | openssh-askpass | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::as | openssh-askpass-gnome | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::as | openssh-clients | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::as | openssh-debuginfo | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::as | openssh-server | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh-askpass | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh-askpass-gnome | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh-clients | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh-debuginfo | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::desktop | openssh-server | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh-askpass | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh-askpass-gnome | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh-clients | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh-debuginfo | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::es | openssh-server | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh-askpass | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh-askpass-gnome | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh-clients | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh-debuginfo | 0 | 0:3.9p1-8.RHEL4.17 |
| Red Hat:enterprise_linux:4::ws | openssh-server | 0 | 0:3.9p1-8.RHEL4.17 |
Related vulnerabilities
- CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host… Also affects openssh
- CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are… Also affects openssh
- CVE-2016-10009 Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4… Also affects openssh
- CVE-2010-5107 The default configuration of OpenSSH through 6.1 enforces a fixed time limit between… Also affects openssh
- CVE-2008-5161 Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0… Also affects openssh
- CVE-2008-4109 A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and… Also affects openssh
- CVE-2008-0166 OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a… Also affects openssh
- CVE-2006-4925 packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash)… Also affects openssh