10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.972 High
EPSS
Percentile
99.8%
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | openssh | < 1:9.2p1-2+deb12u2 | openssh_1:9.2p1-2+deb12u2_all.deb |
Debian | 11 | all | openssh | < 1:8.4p1-5+deb11u3 | openssh_1:8.4p1-5+deb11u3_all.deb |
Debian | 10 | all | openssh | < 1:7.9p1-10+deb10u2 | openssh_1:7.9p1-10+deb10u2_all.deb |
Debian | 999 | all | openssh | < 1:9.7p1-4 | openssh_1:9.7p1-4_all.deb |
Debian | 13 | all | openssh | < 1:9.6p1-4 | openssh_1:9.6p1-4_all.deb |