Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH 远程拒绝服务漏洞
Vulnerability Description
OpenSSH(OpenBSD Secure Shell)是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现,支持对所有的传输进行加密,可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 6.1之前版本中的默认配置中存在漏洞,该漏洞源于程序执行固定时间限制建立TCP连接和完成登录。通过定期制作多个新的TCP连接,远程攻击者利用该漏洞导致拒绝服务(连接插槽耗尽)。
CVSS Information
N/A
Vulnerability Type
N/A