Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-5107
HistoryMar 07, 2013 - 8:55 p.m.

CVE-2010-5107

2013-03-0720:55:01
[email protected]
web.nvd.nist.gov
4371
openssh
cve-2010-5107
tcp connection
denial of service
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.8 Medium

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

Affected configurations

NVD
Node
openbsdopensshRange≤6.1
OR
openbsdopensshMatch1.2
OR
openbsdopensshMatch1.2.1
OR
openbsdopensshMatch1.2.2
OR
openbsdopensshMatch1.2.3
OR
openbsdopensshMatch1.2.27
OR
openbsdopensshMatch1.3
OR
openbsdopensshMatch1.5
OR
openbsdopensshMatch1.5.7
OR
openbsdopensshMatch1.5.8
OR
openbsdopensshMatch2.1
OR
openbsdopensshMatch2.1.1
OR
openbsdopensshMatch2.2
OR
openbsdopensshMatch2.3
OR
openbsdopensshMatch2.3.1
OR
openbsdopensshMatch2.5
OR
openbsdopensshMatch2.5.1
OR
openbsdopensshMatch2.5.2
OR
openbsdopensshMatch2.9
OR
openbsdopensshMatch2.9.9
OR
openbsdopensshMatch2.9.9p2
OR
openbsdopensshMatch2.9p1
OR
openbsdopensshMatch2.9p2
OR
openbsdopensshMatch3.0
OR
openbsdopensshMatch3.0.1
OR
openbsdopensshMatch3.0.1p1
OR
openbsdopensshMatch3.0.2
OR
openbsdopensshMatch3.0.2p1
OR
openbsdopensshMatch3.0p1
OR
openbsdopensshMatch3.1
OR
openbsdopensshMatch3.1p1
OR
openbsdopensshMatch3.2
OR
openbsdopensshMatch3.2.2
OR
openbsdopensshMatch3.2.2p1
OR
openbsdopensshMatch3.2.3p1
OR
openbsdopensshMatch3.3
OR
openbsdopensshMatch3.3p1
OR
openbsdopensshMatch3.4
OR
openbsdopensshMatch3.4p1
OR
openbsdopensshMatch3.5
OR
openbsdopensshMatch3.5p1
OR
openbsdopensshMatch3.6
OR
openbsdopensshMatch3.6.1
OR
openbsdopensshMatch3.6.1p1
OR
openbsdopensshMatch3.6.1p2
OR
openbsdopensshMatch3.7
OR
openbsdopensshMatch3.7.1
OR
openbsdopensshMatch3.7.1p1
OR
openbsdopensshMatch3.7.1p2
OR
openbsdopensshMatch3.8
OR
openbsdopensshMatch3.8.1
OR
openbsdopensshMatch3.8.1p1
OR
openbsdopensshMatch3.9
OR
openbsdopensshMatch3.9.1
OR
openbsdopensshMatch3.9.1p1
OR
openbsdopensshMatch4.0
OR
openbsdopensshMatch4.0p1
OR
openbsdopensshMatch4.1
OR
openbsdopensshMatch4.1p1
OR
openbsdopensshMatch4.2
OR
openbsdopensshMatch4.2p1
OR
openbsdopensshMatch4.3
OR
openbsdopensshMatch4.3p1
OR
openbsdopensshMatch4.3p2
OR
openbsdopensshMatch4.4
OR
openbsdopensshMatch4.4p1
OR
openbsdopensshMatch4.5
OR
openbsdopensshMatch4.6
OR
openbsdopensshMatch4.7
OR
openbsdopensshMatch4.8
OR
openbsdopensshMatch4.9
OR
openbsdopensshMatch5.0
OR
openbsdopensshMatch5.1
OR
openbsdopensshMatch5.2
OR
openbsdopensshMatch5.3
OR
openbsdopensshMatch5.4
OR
openbsdopensshMatch5.5
OR
openbsdopensshMatch5.6
OR
openbsdopensshMatch5.7
OR
openbsdopensshMatch5.8
OR
openbsdopensshMatch5.8p2
OR
openbsdopensshMatch5.9
OR
openbsdopensshMatch6.0

Related

nessus 21
openvas 11
ibm 2
f5 2
fedora 2
cvelist 1
veracode 1
redhat 2
debiancve 1
checkpoint_advisories 2
ubuntucve 1
prion 1
centos 1
oraclelinux 2
seebug 1
nvd 1
aix 1
securityvulns 5
gentoo 1
oracle 1
nessus
nessus
OracleVM 3.2 : openssh (OVMSA-2016-0030)
2016-02-29 00:00:00
Mandriva Linux Security Advisory : openssh (MDVSA-2013:051)
2013-04-20 00:00:00
OpenSSH LoginGraceTime / MaxStartups DoS
2013-07-03 00:00:00
openvas
openvas
Fedora Update for openssh FEDORA-2013-2212
2013-02-15 00:00:00
OpenSSH Denial of Service Vulnerability
2014-04-09 00:00:00
Fedora Update for openssh FEDORA-2013-2206
2013-03-01 00:00:00
ibm
ibm
Security Bulletin: Flex System Manager (FSM) vulnerability allows a denial of service attack (CVE-2010-5107)
2019-01-30 08:20:01
Security Bulletin: IBM System x and Flex Systems OpenSSH Vulnerabilities (CVE-2012-0814, CVE-2008-5161)
2019-01-30 08:05:01
f5
f5
SOL14741 - OpenSSH vulnerability CVE-2010-5107
2013-10-10 00:00:00
K14741 : OpenSSH vulnerability CVE-2010-5107
2015-09-15 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openssh-5.9p1-29.fc17
2013-02-26 02:47:11
[SECURITY] Fedora 18 Update: openssh-6.1p1-5.fc18
2013-02-13 04:33:12
cvelist
cvelist
CVE-2010-5107
2013-03-07 20:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:51:36
redhat
redhat
(RHSA-2013:1591) Low: openssh security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
debiancve
debiancve
CVE-2010-5107
2013-03-07 20:55:01
checkpoint_advisories
checkpoint_advisories
OpenSSH maxstartup Threshold Connection Exhaustion denial of service (CVE-2010-5107)
2013-10-27 00:00:00
OpenSSH maxstartup Threshold Connection Exhaustion Denial of Service - ver 2 (CVE-2010-5107)
2013-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2010-5107
2013-03-07 00:00:00
prion
prion
Default configuration
2013-03-07 20:55:00
centos
centos
openssh, pam_ssh_agent_auth security update
2013-11-26 13:32:28
oraclelinux
oraclelinux
openssh security update
2016-02-24 00:00:00
openssh security, bug fix, and enhancement update
2013-11-26 00:00:00
seebug
seebug
OpenSSH默认服务器配置拒绝服务漏洞(CVE-2010-5107)
2013-02-28 00:00:00
nvd
nvd
CVE-2010-5107
2013-03-07 20:55:01
aix
aix
AIX OpenSSH Vulnerability
2013-04-08 15:19:58
securityvulns
securityvulns
[ MDVSA-2013:022 ] openssh
2013-03-24 00:00:00
OpenSSH security vulnerabilities
2013-03-24 00:00:00
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
2015-09-14 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2014-05-11 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.8 Medium

AI Score

Confidence

High

0.079 Low

EPSS

Percentile

94.3%

JSON
Related for CVE-2010-5107
nessus21openvas11ibm2f52fedora2cvelist1veracode1redhat2debiancve1checkpoint_advisories2ubuntucve1prion1centos1oraclelinux2seebug1nvd1aix1securityvulns5gentoo1oracle1