CVE-2008-4109

CVE-2008-4109 refers to a Debian OpenSSH patch that, prior to specific package versions (e.g., 4.3p2-9etch3, 4.6p1-1, and equivalents in SUSE), used non-async-signal-safe functions in the login-timeout signal handler. This can cause a denial of service (connection slot exhaustion) via multiple lo...