Descriptionpacket.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2006:062, published Fri, 20 Oct 2006 17:00:00 +0000
- SUSE-SR:2006:024, published Fri, 06 Oct 2006 14:00:00 +0000
- TID7005435, published Sa 3. MÃ¤r 10:24:20 CET 2018
SUSE Timeline for this CVECVE page created: Fri Jun 28 05:12:41 2013
CVE page last modified: Fri Oct 7 12:45:34 2022