NVD

Id
16342  
Name
CVE-2010-5107  
Description
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-03-07  
Modified Date
2016-11-28  
Seq
2010-5107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
91912 16342 CVE-2010-5107 HPSBMU03409  View
91913 16342 CVE-2010-5107 oval:org.mitre.oval:def:19515  View
91914 16342 CVE-2010-5107 oval:org.mitre.oval:def:19595  View
91915 16342 CVE-2010-5107 RHSA-2013:1591  View
91916 16342 CVE-2010-5107 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234  View
91917 16342 CVE-2010-5107 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config.5?r1=1.156#rev1.156  View
91918 16342 CVE-2010-5107 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?r1=1.89#rev1.89  View
91919 16342 CVE-2010-5107 [oss-security] 20130206 Re: CVE id request: openssh?  View
91920 16342 CVE-2010-5107 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
91921 16342 CVE-2010-5107 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
91922 16342 CVE-2010-5107 58162  View
91923 16342 CVE-2010-5107 https://bugzilla.redhat.com/show_bug.cgi?id=908707  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20207 JVNDB-2013-001782 OpenSSH のデフォルト設定におけるサービス運用妨害 (DoS) の脆弱性 OpenSSH のデフォルト設定は、TCP 接続の確立とログイン完了までの一定の時間制限を適切に処理しないため、サービス運用妨害 (コネクションスロットの枯渇) 状態となる脆弱性が存在します。 CVE-2010-5107 47687 CVE-2010-5107 16342 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001782.html 2013-03-07 2015-04-30 View