JVN#20671901: VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability

The SSH server (IPSSH) implementation in VxWorks contains a denial-of-service (DoS) vulnerability due to an issue in the processing authentication requests.

Impact

Recieiving a specially crafted packet for a public key authentication request may cause the server to hang and SSH access to be unavailable until the next reboot. In addition, arbitrary code may be executed on the server.

Solution

Apply a patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

• VxWorks versions 6.5 through 6.9