Denial of Service Vulnerability in OpenSSH by Remote Authenticated Users
CVE-2010-4755
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2010-4755?
The remote_glob function in sftp-glob.c and the process_put function in sftp.c, found in versions of OpenSSH earlier than 5.9, enable remote authenticated users to exploit crafted glob expressions, resulting in significant CPU and memory consumption. When these expressions do not match existing pathnames, they create a denial of service condition, impacting system performance and availability. This vulnerability affects several operating systems, including FreeBSD, NetBSD, and OpenBSD.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.