CVE-2010-5107

openssh: Prevent connection slot exhaustion attacks

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

La configuración por defecto de OpenSSH hasta v6.1 impone un límite de tiempo fijado entre el establecimiento de una conexión TCP y el inicio de sesión, lo que hace que sea más fácil para los atacantes remotos provocar una denegación de servicio periódicamente haciendo muchas conexiones TCP nuevas.

The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: a subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions. Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization Hypervisor through the 3.2 Manager administration portal, the Host may appear with the status of "Install Failed". If this happens, place the host into maintenance mode, then activate it again to get the host back to an "Up" state.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-04-30 CVE Reserved
2013-03-07 CVE Published
2024-08-07 CVE Updated
2025-05-04 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption

CAPEC

References (13)

URL	Tag	Source
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234	X_refsource_confirm
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config.5?r1=1.156#rev1.156	X_refsource_confirm
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?r1=1.89#rev1.89	X_refsource_confirm
http://www.openwall.com/lists/oss-security/2013/02/07/3	Mailing List
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	X_refsource_confirm
http://www.securityfocus.com/bid/58162	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19515	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19595	Signature

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://marc.info/?l=bugtraq&m=144050155601375&w=2	2017-09-19
http://rhn.redhat.com/errata/RHSA-2013-1591.html	2017-09-19
https://bugzilla.redhat.com/show_bug.cgi?id=908707	2013-11-20
https://access.redhat.com/security/cve/CVE-2010-5107	2013-11-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				<= 6.1 Search vendor "Openbsd" for product "Openssh" and version " <= 6.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.2 Search vendor "Openbsd" for product "Openssh" and version "1.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.2.1 Search vendor "Openbsd" for product "Openssh" and version "1.2.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.2.2 Search vendor "Openbsd" for product "Openssh" and version "1.2.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.2.3 Search vendor "Openbsd" for product "Openssh" and version "1.2.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.2.27 Search vendor "Openbsd" for product "Openssh" and version "1.2.27"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.3 Search vendor "Openbsd" for product "Openssh" and version "1.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.5 Search vendor "Openbsd" for product "Openssh" and version "1.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.5.7 Search vendor "Openbsd" for product "Openssh" and version "1.5.7"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				1.5.8 Search vendor "Openbsd" for product "Openssh" and version "1.5.8"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.1 Search vendor "Openbsd" for product "Openssh" and version "2.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.1.1 Search vendor "Openbsd" for product "Openssh" and version "2.1.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.2 Search vendor "Openbsd" for product "Openssh" and version "2.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.3 Search vendor "Openbsd" for product "Openssh" and version "2.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.3.1 Search vendor "Openbsd" for product "Openssh" and version "2.3.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.5 Search vendor "Openbsd" for product "Openssh" and version "2.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.5.1 Search vendor "Openbsd" for product "Openssh" and version "2.5.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.5.2 Search vendor "Openbsd" for product "Openssh" and version "2.5.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.9 Search vendor "Openbsd" for product "Openssh" and version "2.9"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.9.9 Search vendor "Openbsd" for product "Openssh" and version "2.9.9"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.9.9p2 Search vendor "Openbsd" for product "Openssh" and version "2.9.9p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.9p1 Search vendor "Openbsd" for product "Openssh" and version "2.9p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				2.9p2 Search vendor "Openbsd" for product "Openssh" and version "2.9p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0 Search vendor "Openbsd" for product "Openssh" and version "3.0"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0.1 Search vendor "Openbsd" for product "Openssh" and version "3.0.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.0.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0.2 Search vendor "Openbsd" for product "Openssh" and version "3.0.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0.2p1 Search vendor "Openbsd" for product "Openssh" and version "3.0.2p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.0p1 Search vendor "Openbsd" for product "Openssh" and version "3.0p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.1 Search vendor "Openbsd" for product "Openssh" and version "3.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.2 Search vendor "Openbsd" for product "Openssh" and version "3.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.2.2 Search vendor "Openbsd" for product "Openssh" and version "3.2.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.2.2p1 Search vendor "Openbsd" for product "Openssh" and version "3.2.2p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.2.3p1 Search vendor "Openbsd" for product "Openssh" and version "3.2.3p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.3 Search vendor "Openbsd" for product "Openssh" and version "3.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.3p1 Search vendor "Openbsd" for product "Openssh" and version "3.3p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.4 Search vendor "Openbsd" for product "Openssh" and version "3.4"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.4p1 Search vendor "Openbsd" for product "Openssh" and version "3.4p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.5 Search vendor "Openbsd" for product "Openssh" and version "3.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.5p1 Search vendor "Openbsd" for product "Openssh" and version "3.5p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.6 Search vendor "Openbsd" for product "Openssh" and version "3.6"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.6.1 Search vendor "Openbsd" for product "Openssh" and version "3.6.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.6.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.6.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.6.1p2 Search vendor "Openbsd" for product "Openssh" and version "3.6.1p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.7 Search vendor "Openbsd" for product "Openssh" and version "3.7"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.7.1 Search vendor "Openbsd" for product "Openssh" and version "3.7.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.7.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.7.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.7.1p2 Search vendor "Openbsd" for product "Openssh" and version "3.7.1p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.8 Search vendor "Openbsd" for product "Openssh" and version "3.8"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.8.1 Search vendor "Openbsd" for product "Openssh" and version "3.8.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.8.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.8.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.9 Search vendor "Openbsd" for product "Openssh" and version "3.9"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.9.1 Search vendor "Openbsd" for product "Openssh" and version "3.9.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				3.9.1p1 Search vendor "Openbsd" for product "Openssh" and version "3.9.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.0 Search vendor "Openbsd" for product "Openssh" and version "4.0"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.0p1 Search vendor "Openbsd" for product "Openssh" and version "4.0p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.1 Search vendor "Openbsd" for product "Openssh" and version "4.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.1p1 Search vendor "Openbsd" for product "Openssh" and version "4.1p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.2 Search vendor "Openbsd" for product "Openssh" and version "4.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.2p1 Search vendor "Openbsd" for product "Openssh" and version "4.2p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.3 Search vendor "Openbsd" for product "Openssh" and version "4.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.3p1 Search vendor "Openbsd" for product "Openssh" and version "4.3p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.3p2 Search vendor "Openbsd" for product "Openssh" and version "4.3p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.4 Search vendor "Openbsd" for product "Openssh" and version "4.4"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.4p1 Search vendor "Openbsd" for product "Openssh" and version "4.4p1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.5 Search vendor "Openbsd" for product "Openssh" and version "4.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.6 Search vendor "Openbsd" for product "Openssh" and version "4.6"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.7 Search vendor "Openbsd" for product "Openssh" and version "4.7"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.8 Search vendor "Openbsd" for product "Openssh" and version "4.8"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				4.9 Search vendor "Openbsd" for product "Openssh" and version "4.9"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.0 Search vendor "Openbsd" for product "Openssh" and version "5.0"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.1 Search vendor "Openbsd" for product "Openssh" and version "5.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.2 Search vendor "Openbsd" for product "Openssh" and version "5.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.3 Search vendor "Openbsd" for product "Openssh" and version "5.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.4 Search vendor "Openbsd" for product "Openssh" and version "5.4"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.5 Search vendor "Openbsd" for product "Openssh" and version "5.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.6 Search vendor "Openbsd" for product "Openssh" and version "5.6"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.7 Search vendor "Openbsd" for product "Openssh" and version "5.7"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.8 Search vendor "Openbsd" for product "Openssh" and version "5.8"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.8p2 Search vendor "Openbsd" for product "Openssh" and version "5.8p2"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				5.9 Search vendor "Openbsd" for product "Openssh" and version "5.9"		-		Affected
Openbsd Search vendor "Openbsd"		Openssh Search vendor "Openbsd" for product "Openssh"				6.0 Search vendor "Openbsd" for product "Openssh" and version "6.0"		-		Affected