Lucene search
HistoryDec 23, 2013 - 10:55 p.m.
CVE-2013-6890
denyhosts
2.6
vulnerability
authentication logs
denial of service
cve-2013-6890
nvd
6.6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.325 Low
EPSS
Percentile
97.0%
denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login names.
Affected configurations
Node
debiandebian_linuxMatch6.0
ORdebiandebian_linuxMatch7.0
ORdebiandebian_linuxMatch7.1
ORfedoraprojectfedora
Node
phil_schwartzdenyhostsMatch2.6
Related
securityvulns
securityvulns
denyhosts DoS
2013-12-24 00:00:00
[SECURITY] [DSA 2826-1] denyhosts security update
2013-12-24 00:00:00
cvelist
cvelist
CVE-2013-6890
2013-12-23 22:00:00
nessus
nessus
Debian DSA-2826-1 : denyhosts - remote denial of ssh service
2013-12-23 00:00:00
Fedora 19 : denyhosts-2.6-28.fc19.1 (2014-17081)
2015-01-06 00:00:00
GLSA-201406-23 : DenyHosts: Denial of Service
2014-06-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: denyhosts-2.6-29.fc20.1
2015-01-05 07:38:34
[SECURITY] Fedora 19 Update: denyhosts-2.6-28.fc19.1
2015-01-05 07:37:55
prion
prion
Authentication flaw
2013-12-23 22:55:00
openvas
openvas
Debian: Security Advisory (DSA-2826-1)
2013-12-21 00:00:00
Fedora Update for denyhosts FEDORA-2014-17081
2015-01-05 00:00:00
nvd
nvd
CVE-2013-6890
2013-12-23 22:55:03
gentoo
gentoo
DenyHosts: Denial of service
2014-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2013-6890
2013-12-23 00:00:00
debian
debian
[SECURITY] [DSA 2826-1] denyhosts security update
2013-12-22 18:26:15
[SECURITY] [DSA 2826-2] denyhosts regression update
2014-01-23 22:03:35
mageia
mageia
Updated denyhosts package fixes security vulnerability
2014-02-17 04:22:31
6.6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.325 Low
EPSS
Percentile
97.0%
Related for CVE-2013-6890