Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute…

Description

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

Scores

EPSS (exploitation in 30 days)

45.6% · top 1.2% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Weakness

• n/a
• CWE-415 (opens in a new tab)All about CWE-415 and its CVEs

Affected products

• n/a

  • affected n/a

References (56)

• FreeBSD-SA-06:22 (opens in a new tab)vendor-advisoryx_transferred
• http://sourceforge.net/forum/forum.php?forum_id=681763 (opens in a new tab)x_transferred
• 22270 (opens in a new tab)third-party-advisoryx_transferred
• http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf (opens in a new tab)x_transferred
• USN-355-1 (opens in a new tab)vendor-advisoryx_transferred
• [freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.openssh (opens in a new tab)mailing-listx_transferred
• http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (opens in a new tab)x_transferred
• oval:org.mitre.oval:def:11387 (opens in a new tab)vdb-entrysignaturex_transferred
• http://openssh.org/txt/release-4.4 (opens in a new tab)x_transferred
• 24805 (opens in a new tab)third-party-advisoryx_transferred
• VU#851340 (opens in a new tab)third-party-advisoryx_transferred
• [2.9] 015: SECURITY FIX: October 12, 2006 (opens in a new tab)vendor-advisoryx_transferred
• 22487 (opens in a new tab)third-party-advisoryx_transferred
• TA07-072A (opens in a new tab)third-party-advisoryx_transferred
• http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf (opens in a new tab)x_transferred
• GLSA-200611-06 (opens in a new tab)vendor-advisoryx_transferred
• SUSE-SA:2006:062 (opens in a new tab)vendor-advisoryx_transferred
• 22362 (opens in a new tab)third-party-advisoryx_transferred
• 23680 (opens in a new tab)third-party-advisoryx_transferred
• APPLE-SA-2007-03-13 (opens in a new tab)vendor-advisoryx_transferred
• http://docs.info.apple.com/article.html?artnum=305214 (opens in a new tab)x_transferred
• 22352 (opens in a new tab)third-party-advisoryx_transferred
• ADV-2006-4329 (opens in a new tab)vdb-entryx_transferred
• 22236 (opens in a new tab)third-party-advisoryx_transferred
• 24799 (opens in a new tab)third-party-advisoryx_transferred
• ADV-2006-4018 (opens in a new tab)vdb-entryx_transferred
• 22495 (opens in a new tab)third-party-advisoryx_transferred
• openssh-signal-handler-race-condition(29254) (opens in a new tab)vdb-entryx_transferred
• 20241 (opens in a new tab)vdb-entryx_transferred
• ADV-2007-1332 (opens in a new tab)vdb-entryx_transferred
• 29264 (opens in a new tab)vdb-entryx_transferred
• 22823 (opens in a new tab)third-party-advisoryx_transferred
• SSA:2006-272-02 (opens in a new tab)vendor-advisoryx_transferred
• RHSA-2006:0697 (opens in a new tab)vendor-advisoryx_transferred
• OpenPKG-SA-2006.022 (opens in a new tab)vendor-advisoryx_transferred
• 22183 (opens in a new tab)third-party-advisoryx_transferred
• [openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released (opens in a new tab)mailing-listx_transferred
• ADV-2007-0930 (opens in a new tab)vdb-entryx_transferred
• [security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability (opens in a new tab)mailing-listx_transferred
• 22926 (opens in a new tab)third-party-advisoryx_transferred
• 22173 (opens in a new tab)third-party-advisoryx_transferred
• 1016940 (opens in a new tab)vdb-entryx_transferred
• 22208 (opens in a new tab)third-party-advisoryx_transferred
• http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (opens in a new tab)x_transferred
• 22245 (opens in a new tab)third-party-advisoryx_transferred
• 22196 (opens in a new tab)third-party-advisoryx_transferred
• DSA-1212 (opens in a new tab)vendor-advisoryx_transferred
• RHSA-2006:0698 (opens in a new tab)vendor-advisoryx_transferred
• 22158 (opens in a new tab)third-party-advisoryx_transferred
• MDKSA-2006:179 (opens in a new tab)vendor-advisoryx_transferred
• DSA-1189 (opens in a new tab)vendor-advisoryx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm (opens in a new tab)x_transferred
• 24479 (opens in a new tab)third-party-advisoryx_transferred
• [oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (opens in a new tab)mailing-listx_transferred
• [oss-security] 20240728 Re: Announce: OpenSSH 9.8 released (opens in a new tab)mailing-listx_transferred
• https://www.openwall.com/lists/oss-security/2024/07/28/3 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-5051](https://trackcve.app/badge/CVE-2006-5051.svg)](https://trackcve.app/cve/CVE-2006-5051)

Record last updated 7 Aug 2024, 19:32 UTC.