Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH'ssh/kex.c'拒绝服务漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 6.x版本和7.x至7.3版本中的kex.c文件的‘kex_input_kexinit’函数存在拒绝服务漏洞。远程攻击者可通过发送许多复制的KEXINIT请求利用该漏洞造成拒绝服务。注意：第三方报告称不将OpenSSH upstream视为安全漏洞。
CVSS Information
N/A
Vulnerability Type
N/A