Denial of Service Vulnerability in OpenSSH by Remote Authenticated Users
CVE-2010-4755

Currently unrated

Key Information:

Vendor

OpenBSD

Status
Vendor
CVE Published:
2 March 2011

What is CVE-2010-4755?

The remote_glob function in sftp-glob.c and the process_put function in sftp.c, found in versions of OpenSSH earlier than 5.9, enable remote authenticated users to exploit crafted glob expressions, resulting in significant CPU and memory consumption. When these expressions do not match existing pathnames, they create a denial of service condition, impacting system performance and availability. This vulnerability affects several operating systems, including FreeBSD, NetBSD, and OpenBSD.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2010-4755 : Denial of Service Vulnerability in OpenSSH by Remote Authenticated Users