CVE-2006-5051
Fixed in a distro release EPSS 46%
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
Products: openbsd openssh, debian_linux, apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssh | 1:4.6p1-1 |
| Debian 13 | openssh | 1:4.6p1-1 |
| Debian 14 | openssh | 1:4.6p1-1 |
| Debian 3.1 | openssh | 1:3.8.1p1-8.sarge.6 |
| Debian 3.1 | openssh-krb5 | 3.8.1p1-7sarge1 |
| Debian 4.0 | openssh | 1:4.3p2-9etch3 |
| Red Hat Enterprise Linux 2.1 | openssh | 0:3.1p1-21 |
| Red Hat Enterprise Linux 2.1 | openssh-askpass | 0:3.1p1-21 |
| Red Hat Enterprise Linux 2.1 | openssh-askpass-gnome | 0:3.1p1-21 |
| Red Hat Enterprise Linux 2.1 | openssh-clients | 0:3.1p1-21 |
| Red Hat Enterprise Linux 2.1 | openssh-server | 0:3.1p1-21 |
| Red Hat Enterprise Linux 3 | openssh | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 3 | openssh-askpass | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 3 | openssh-askpass-gnome | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 3 | openssh-clients | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 3 | openssh-debuginfo | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 3 | openssh-server | 0:3.6.1p2-33.30.12 |
| Red Hat Enterprise Linux 4 | openssh | 0:3.9p1-8.RHEL4.17 |
| Red Hat Enterprise Linux 4 | openssh-askpass | 0:3.9p1-8.RHEL4.17 |
| Red Hat Enterprise Linux 4 | openssh-askpass-gnome | 0:3.9p1-8.RHEL4.17 |
| Red Hat Enterprise Linux 4 | openssh-clients | 0:3.9p1-8.RHEL4.17 |
| Red Hat Enterprise Linux 4 | openssh-debuginfo | 0:3.9p1-8.RHEL4.17 |
| Red Hat Enterprise Linux 4 | openssh-server | 0:3.9p1-8.RHEL4.17 |