Denial of Service Vulnerability in OpenSSH by Remote Authenticated Users
CVE-2010-4755
Currently unrated
What is CVE-2010-4755?
The remote_glob function in sftp-glob.c and the process_put function in sftp.c, found in versions of OpenSSH earlier than 5.9, enable remote authenticated users to exploit crafted glob expressions, resulting in significant CPU and memory consumption. When these expressions do not match existing pathnames, they create a denial of service condition, impacting system performance and availability. This vulnerability affects several operating systems, including FreeBSD, NetBSD, and OpenBSD.