Upstream information

CVE-2008-4109 at MITRE

Description

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

CVSS v2 Scores
CVSS detail National Vulnerability Database
Base Score 5
Vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entries: 1226642 [RESOLVED / FIXED], 426510 [RESOLVED / FIXED]

SUSE Security Advisories:


Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s) Source package State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-SAP-CCloud openssh Analysis
SUSE Linux Enterprise Micro 5.3 openssh Analysis
SUSE Linux Enterprise Micro 5.4 openssh Analysis
SUSE Linux Enterprise Micro 5.5 openssh Analysis
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-SP3-CHOST-BYOS-Aliyun openssh Analysis
SLES15-SP3-CHOST-BYOS-Azure openssh Analysis
SLES15-SP3-CHOST-BYOS-EC2 openssh Analysis
SLES15-SP3-CHOST-BYOS-GCE openssh Analysis
SLES15-SP3-CHOST-BYOS-SAP-CCloud openssh Analysis
SLES15-SP4-CHOST-BYOS openssh Analysis
SLES15-SP4-CHOST-BYOS-Aliyun openssh Analysis
SLES15-SP4-CHOST-BYOS-Azure openssh Analysis
SLES15-SP4-CHOST-BYOS-EC2 openssh Analysis
SLES15-SP4-CHOST-BYOS-GCE openssh Analysis
SLES15-SP4-CHOST-BYOS-SAP-CCloud openssh Analysis
SLES15-SP5-CHOST-BYOS-Aliyun openssh Analysis
SLES15-SP5-CHOST-BYOS-Azure openssh Analysis
SLES15-SP5-CHOST-BYOS-EC2 openssh Analysis
SLES15-SP5-CHOST-BYOS-GCE openssh Analysis
SLES15-SP5-CHOST-BYOS-GDC openssh Analysis
SUSE Linux Enterprise High Performance Computing 12 SP5 openssh Analysis
SUSE Linux Enterprise High Performance Computing 12 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP5 openssh Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE openssh Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP5 openssh Analysis
SUSE Linux Enterprise Server 12 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP5-LTSS openssh Analysis
SUSE Linux Enterprise Server 12 SP5-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP4 openssh Analysis
SUSE Linux Enterprise Server 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP4-LTSS openssh Analysis
SUSE Linux Enterprise Server 15 SP4-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP5 openssh Analysis
SUSE Linux Enterprise Server 15 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP5-LTSS openssh Analysis
SUSE Linux Enterprise Server 15 SP5-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 openssh Analysis
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP5 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP4 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP5 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP5 openssh-askpass-gnome Analysis
SUSE Manager Proxy 4.3 openssh Analysis
SUSE Manager Proxy 4.3 openssh-askpass-gnome Analysis
SUSE Manager Proxy LTS 4.3 openssh Analysis
SUSE Manager Retail Branch Server 4.3 openssh Analysis
SUSE Manager Retail Branch Server 4.3 openssh-askpass-gnome Analysis
SUSE Manager Retail Branch Server LTS 4.3 openssh Analysis
SUSE Manager Server 4.3 openssh Analysis
SUSE Manager Server 4.3 openssh-askpass-gnome Analysis
SUSE Manager Server LTS 4.3 openssh Analysis
Products past their end of life and not receiving proactive updates anymore.
HPE Helion OpenStack 8 openssh Analysis
HPE Helion OpenStack 8 openssh-askpass-gnome Analysis
SUSE CaaS Platform 3.0 openssh Analysis
SUSE CaaS Platform 4.0 openssh Unsupported
SUSE CaaS Platform 4.0 openssh-askpass-gnome Unsupported
SUSE Enterprise Storage 6 openssh Analysis
SUSE Enterprise Storage 6 openssh-askpass-gnome Analysis
SUSE Enterprise Storage 7 openssh Analysis
SUSE Enterprise Storage 7 openssh-askpass-gnome Analysis
SUSE Enterprise Storage 7.1 openssh Unsupported
SUSE Enterprise Storage 7.1 openssh-askpass-gnome Unsupported
SUSE Linux Enterprise Desktop 11 SP4 openssh Analysis
SUSE Linux Enterprise Desktop 11 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 12 SP2 openssh Analysis
SUSE Linux Enterprise Desktop 12 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 12 SP3 openssh Analysis
SUSE Linux Enterprise Desktop 12 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 12 SP4 openssh Analysis
SUSE Linux Enterprise Desktop 12 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 openssh Analysis
SUSE Linux Enterprise Desktop 15 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 SP1 openssh Analysis
SUSE Linux Enterprise Desktop 15 SP1 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 SP2 openssh Analysis
SUSE Linux Enterprise Desktop 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 SP3 openssh Analysis
SUSE Linux Enterprise Desktop 15 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 SP4 openssh Analysis
SUSE Linux Enterprise Desktop 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Desktop 15 SP5 openssh Analysis
SUSE Linux Enterprise Desktop 15 SP5 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 12 SP2 openssh Analysis
SUSE Linux Enterprise High Performance Computing 12 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 12 SP3 openssh Analysis
SUSE Linux Enterprise High Performance Computing 12 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 12 SP4 openssh Analysis
SUSE Linux Enterprise High Performance Computing 12 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP1 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP1 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh-askpass-gnome Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP2 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4 openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15-ESPOS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise High Performance Computing 15-LTSS openssh Analysis
SUSE Linux Enterprise High Performance Computing 15-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Micro 5.0 openssh Analysis
SUSE Linux Enterprise Micro 5.1 openssh Analysis
SUSE Linux Enterprise Micro 5.2 openssh Analysis
SUSE Linux Enterprise Module for Basesystem 15 openssh Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP1 openssh Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP2 openssh Analysis
SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 SP1 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Desktop Applications 15 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Module for Server Applications 15 openssh Analysis
SUSE Linux Enterprise Module for Server Applications 15 SP1 openssh Analysis
SUSE Linux Enterprise Module for Server Applications 15 SP2 openssh Analysis
SUSE Linux Enterprise Module for Server Applications 15 SP3 openssh Analysis
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT openssh Analysis
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT openssh-askpass-gnome Analysis
SUSE Linux Enterprise Real Time 15 SP2 openssh Analysis
SUSE Linux Enterprise Real Time 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Real Time 15 SP3 openssh Unsupported
SUSE Linux Enterprise Real Time 15 SP3 openssh-askpass-gnome Unsupported
SUSE Linux Enterprise Real Time 15 SP4 openssh Analysis
SUSE Linux Enterprise Real Time 15 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 11 SP4 openssh Analysis
SUSE Linux Enterprise Server 11 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS openssh Analysis
SUSE Linux Enterprise Server 11 SP4 LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 11 SP4-LTSS openssh Analysis
SUSE Linux Enterprise Server 11 SP4-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP2 openssh Analysis
SUSE Linux Enterprise Server 12 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP2-BCL openssh Analysis
SUSE Linux Enterprise Server 12 SP2-BCL openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP2-ESPOS openssh Analysis
SUSE Linux Enterprise Server 12 SP2-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP2-LTSS openssh Analysis
SUSE Linux Enterprise Server 12 SP2-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP3 openssh Analysis
SUSE Linux Enterprise Server 12 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP3-BCL openssh Analysis
SUSE Linux Enterprise Server 12 SP3-BCL openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP3-ESPOS openssh Analysis
SUSE Linux Enterprise Server 12 SP3-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP3-LTSS openssh Analysis
SUSE Linux Enterprise Server 12 SP3-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP4 openssh Analysis
SUSE Linux Enterprise Server 12 SP4 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP4-ESPOS openssh Analysis
SUSE Linux Enterprise Server 12 SP4-ESPOS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 12 SP4-LTSS openssh Analysis
SUSE Linux Enterprise Server 12 SP4-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 openssh Analysis
SUSE Linux Enterprise Server 15 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP1 openssh Analysis
SUSE Linux Enterprise Server 15 SP1 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP1-BCL openssh Analysis
SUSE Linux Enterprise Server 15 SP1-BCL openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP1-LTSS openssh Analysis
SUSE Linux Enterprise Server 15 SP1-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP2 openssh Analysis
SUSE Linux Enterprise Server 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP2-BCL openssh Analysis
SUSE Linux Enterprise Server 15 SP2-BCL openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP2-LTSS openssh Analysis
SUSE Linux Enterprise Server 15 SP2-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP3 openssh Analysis
SUSE Linux Enterprise Server 15 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP3-BCL openssh Analysis
SUSE Linux Enterprise Server 15 SP3-BCL openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15 SP3-LTSS openssh Analysis
SUSE Linux Enterprise Server 15 SP3-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server 15-LTSS openssh Analysis
SUSE Linux Enterprise Server 15-LTSS openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh Analysis
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh Unsupported
SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-askpass-gnome Unsupported
SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh Unsupported
SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-askpass-gnome Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 15 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh-askpass-gnome Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP2 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP2 openssh-askpass-gnome Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP3 openssh Analysis
SUSE Linux Enterprise Server for SAP Applications 15 SP3 openssh-askpass-gnome Analysis
SUSE Manager Proxy 4.0 openssh Analysis
SUSE Manager Proxy 4.0 openssh-askpass-gnome Analysis
SUSE Manager Proxy 4.1 openssh Analysis
SUSE Manager Proxy 4.1 openssh-askpass-gnome Analysis
SUSE Manager Proxy 4.2 openssh Unsupported
SUSE Manager Proxy 4.2 openssh-askpass-gnome Analysis
SUSE Manager Retail Branch Server 4.0 openssh Analysis
SUSE Manager Retail Branch Server 4.0 openssh-askpass-gnome Analysis
SUSE Manager Retail Branch Server 4.1 openssh Analysis
SUSE Manager Retail Branch Server 4.1 openssh-askpass-gnome Analysis
SUSE Manager Retail Branch Server 4.2 openssh Unsupported
SUSE Manager Retail Branch Server 4.2 openssh-askpass-gnome Analysis
SUSE Manager Server 4.0 openssh Analysis
SUSE Manager Server 4.0 openssh-askpass-gnome Analysis
SUSE Manager Server 4.1 openssh Analysis
SUSE Manager Server 4.1 openssh-askpass-gnome Analysis
SUSE Manager Server 4.2 openssh Unsupported
SUSE Manager Server 4.2 openssh-askpass-gnome Analysis
SUSE OpenStack Cloud 7 openssh Analysis
SUSE OpenStack Cloud 7 openssh-askpass-gnome Analysis
SUSE OpenStack Cloud 8 openssh Analysis
SUSE OpenStack Cloud 8 openssh-askpass-gnome Analysis
SUSE OpenStack Cloud 9 openssh Unsupported
SUSE OpenStack Cloud 9 openssh-askpass-gnome Unsupported
SUSE OpenStack Cloud Crowbar 8 openssh Analysis
SUSE OpenStack Cloud Crowbar 8 openssh-askpass-gnome Analysis
SUSE OpenStack Cloud Crowbar 9 openssh Unsupported
SUSE OpenStack Cloud Crowbar 9 openssh-askpass-gnome Unsupported
openSUSE Leap 15.3 openssh Analysis
openSUSE Leap 15.3 openssh-askpass-gnome Analysis
openSUSE Leap 15.4 openssh Analysis
openSUSE Leap 15.4 openssh-askpass-gnome Analysis
openSUSE Leap 15.5 openssh Analysis
openSUSE Leap 15.5 openssh-askpass-gnome Analysis
openSUSE Leap Micro 5.2 openssh Analysis
openSUSE Leap Micro 5.3 openssh Analysis
openSUSE Leap Micro 5.4 openssh Analysis
openSUSE Leap Micro 5.5 openssh Analysis
Container Status
ses/7.1/cephcsi/cephcsi
ses/7.1/rook/ceph
ses/7/ceph/ceph
ses/7/cephcsi/cephcsi
ses/7/rook/ceph
suse/hpc/warewulf4-x86_64/sle-hpc-node
suse/manager/4.3/proxy-ssh
suse/sle-micro-rancher/5.2
suse/sle-micro-rancher/5.3
suse/sle-micro-rancher/5.4
suse/sle-micro/5.5
trento/trento-runner
opensshAnalysis


SUSE Timeline for this CVE

CVE page created: Tue Jul 9 16:35:37 2013
CVE page last modified: Sun Aug 16 21:19:18 2026