Lucene search

K
f5F5F5:K14741
HistorySep 15, 2015 - 12:00 a.m.

K14741 : OpenSSH vulnerability CVE-2010-5107

2015-09-1500:00:00
my.f5.com
90

4.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.079 Low

EPSS

Percentile

93.6%

Security Advisory Description

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. (CVE-2010-5107)
Impact
This issue may limit access to SSH services on the affected BIG-IP system.

4.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.079 Low

EPSS

Percentile

93.6%