CVE-2006-4924 (CNNVD-200609-454)

HIGH 有利用代码
中文标题:
OpenSSH 拒绝服务漏洞
英文标题:
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause ...
CVSS分数: 7.8
发布时间: 2006-09-27 01:00:00
漏洞类型: 资源管理错误
状态: PUBLISHED
数据质量分数: 0.40
数据版本: v4
漏洞描述
中文描述:

OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH在处理ssh报文中多个完全一样的块时存在拒绝服务漏洞，如果启用了ssh协议1的话，则远程攻击者就可以通过发送特制的ssh报文耗尽CPU资源。

英文描述:

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

CWE类型:
CWE-399
标签:
dos multiple Tavis Ormandy OSVDB-29152
受影响产品
厂商 产品 版本 版本范围 平台 CPE
openbsd openssh 1.2 - - cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*
openbsd openssh 1.2.1 - - cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*
openbsd openssh 1.2.2 - - cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*
openbsd openssh 1.2.3 - - cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*
openbsd openssh 1.2.27 - - cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*
openbsd openssh 2.1 - - cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*
openbsd openssh 2.1.1 - - cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*
openbsd openssh 2.2 - - cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*
openbsd openssh 2.3 - - cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*
openbsd openssh 2.5 - - cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*
openbsd openssh 2.5.1 - - cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*
openbsd openssh 2.5.2 - - cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*
openbsd openssh 2.9 - - cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*
openbsd openssh 2.9.9 - - cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*
openbsd openssh 2.9.9p2 - - cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*
openbsd openssh 2.9p1 - - cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*
openbsd openssh 2.9p2 - - cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*
openbsd openssh 3.0 - - cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*
openbsd openssh 3.0.1 - - cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*
openbsd openssh 3.0.1p1 - - cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*
openbsd openssh 3.0.2 - - cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*
openbsd openssh 3.0.2p1 - - cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*
openbsd openssh 3.0p1 - - cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*
openbsd openssh 3.1 - - cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*
openbsd openssh 3.1p1 - - cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*
openbsd openssh 3.2 - - cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*
openbsd openssh 3.2.2 - - cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*
openbsd openssh 3.2.2p1 - - cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*
openbsd openssh 3.2.3p1 - - cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*
openbsd openssh 3.3 - - cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*
openbsd openssh 3.3p1 - - cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*
openbsd openssh 3.4 - - cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*
openbsd openssh 3.4p1 - - cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*
openbsd openssh 3.5 - - cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*
openbsd openssh 3.5p1 - - cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*
openbsd openssh 3.6 - - cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*
openbsd openssh 3.6.1 - - cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*
openbsd openssh 3.6.1p1 - - cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*
openbsd openssh 3.6.1p2 - - cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*
openbsd openssh 3.7 - - cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*
openbsd openssh 3.7.1 - - cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*
openbsd openssh 3.7.1p1 - - cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*
openbsd openssh 3.7.1p2 - - cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*
openbsd openssh 3.8 - - cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*
openbsd openssh 3.8.1 - - cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*
openbsd openssh 3.8.1p1 - - cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*
openbsd openssh 3.9 - - cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*
openbsd openssh 3.9.1 - - cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*
openbsd openssh 3.9.1p1 - - cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*
openbsd openssh 4.0 - - cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*
openbsd openssh 4.0p1 - - cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*
openbsd openssh 4.1p1 - - cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*
openbsd openssh 4.2 - - cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*
openbsd openssh 4.2p1 - - cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*
openbsd openssh 4.3 - - cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*
openbsd openssh 4.3p1 - - cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
FreeBSD-SA-06:22 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
22270 third-party-advisory
cve.org
访问
HPSBUX02178 vendor-advisory
cve.org
访问
23038 third-party-advisory
cve.org
访问
USN-355-1 vendor-advisory
cve.org
访问
2006-0054 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
ADV-2006-4401 vdb-entry
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
ADV-2009-0740 vdb-entry
cve.org
访问
22116 third-party-advisory
cve.org
访问
21923 third-party-advisory
cve.org
访问
24805 third-party-advisory
cve.org
访问
23340 third-party-advisory
cve.org
访问
[2.9] 015: SECURITY FIX: October 12, 2006 vendor-advisory
cve.org
访问
SUSE-SR:2006:024 vendor-advisory
cve.org
访问
22487 third-party-advisory
cve.org
访问
TA07-072A third-party-advisory
cve.org
访问
GLSA-200611-06 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
22164 third-party-advisory
cve.org
访问
102962 vendor-advisory
cve.org
访问
SUSE-SA:2006:062 vendor-advisory
cve.org
访问
22362 third-party-advisory
cve.org
访问
23680 third-party-advisory
cve.org
访问
APPLE-SA-2007-03-13 vendor-advisory
cve.org
访问
34274 third-party-advisory
cve.org
访问
VU#787448 third-party-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
1016931 vdb-entry
cve.org
访问
ADV-2006-4869 vdb-entry
cve.org
访问
22298 third-party-advisory
cve.org
访问
22352 third-party-advisory
cve.org
访问
22236 third-party-advisory
cve.org
访问
oval:org.mitre.oval:def:1193 vdb-entry
cve.org
访问
24799 third-party-advisory
cve.org
访问
无标题 x_refsource_MISC
cve.org
访问
22091 third-party-advisory
cve.org
访问
22495 third-party-advisory
cve.org
访问
ADV-2007-1332 vdb-entry
cve.org
访问
20216 vdb-entry
cve.org
访问
20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server mailing-list
cve.org
访问
GLSA-200609-17 vendor-advisory
cve.org
访问
22823 third-party-advisory
cve.org
访问
FreeBSD-SA-06:22.openssh vendor-advisory
cve.org
访问
SSA:2006-272-02 vendor-advisory
cve.org
访问
RHSA-2006:0697 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
ADV-2006-3777 vdb-entry
cve.org
访问
OpenPKG-SA-2006.022 vendor-advisory
cve.org
访问
22183 third-party-advisory
cve.org
访问
openssh-block-dos(29158) vdb-entry
cve.org
访问
[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released mailing-list
cve.org
访问
23241 third-party-advisory
cve.org
访问
ADV-2007-2119 vdb-entry
cve.org
访问
ADV-2007-0930 vdb-entry
cve.org
访问
[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability mailing-list
cve.org
访问
22926 third-party-advisory
cve.org
访问
29371 third-party-advisory
cve.org
访问
22208 third-party-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
22245 third-party-advisory
cve.org
访问
20061001-01-P vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
22196 third-party-advisory
cve.org
访问
DSA-1212 vendor-advisory
cve.org
访问
oval:org.mitre.oval:def:10462 vdb-entry
cve.org
访问
RHSA-2006:0698 vendor-advisory
cve.org
访问
29152 vdb-entry
cve.org
访问
25608 third-party-advisory
cve.org
访问
22158 third-party-advisory
cve.org
访问
MDKSA-2006:179 vendor-advisory
cve.org
访问
DSA-1189 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
SCOSA-2008.2 vendor-advisory
cve.org
访问
24479 third-party-advisory
cve.org
访问
ExploitDB EDB-2444 EXPLOIT
exploitdb
访问
Download Exploit EDB-2444 EXPLOIT
exploitdb
访问
CVE Reference: CVE-2006-4924 ADVISORY
cve.org
访问
CVSS评分详情
7.8
HIGH
CVSS向量: AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS版本: 2.0
机密性
NONE
完整性
NONE
可用性
COMPLETE
时间信息
发布时间:
2006-09-27 01:00:00
修改时间:
2024-08-07 19:32:22
创建时间:
2025-11-11 15:32:37
更新时间:
2026-01-19 09:41:59
利用信息
此漏洞有可利用代码！
利用代码数量: 1
利用来源:
未知
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2006-4924 2025-11-11 15:17:45 2025-11-11 07:32:37
NVD nvd_CVE-2006-4924 2025-11-11 14:51:51 2025-11-11 07:41:22
CNNVD cnnvd_CNNVD-200609-454 2025-11-11 15:08:50 2025-11-11 07:49:10
EXPLOITDB exploitdb_EDB-2444 2025-11-11 15:05:27 2025-11-11 08:20:22
版本与语言
当前版本: v4
主要语言: EN
支持语言:
EN ZH
其他标识符:
:
:
安全公告
暂无安全公告信息
变更历史
v4 EXPLOITDB
2025-11-11 16:20:22
references_count: 79 → 82; tags_count: 0 → 4; data_sources: ['cnnvd', 'cve', 'nvd'] → ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
  • references_count: 79 -> 82
  • tags_count: 0 -> 4
  • data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
v3 CNNVD
2025-11-11 15:49:10
vulnerability_type: 未提取 → 资源管理错误; cnnvd_id: 未提取 → CNNVD-200609-454; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
  • vulnerability_type: 未提取 -> 资源管理错误
  • cnnvd_id: 未提取 -> CNNVD-200609-454
  • data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2 NVD
2025-11-11 15:41:22
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.8; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:N/I:N/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 56; references_count: 80 → 79; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
  • cvss_score: 未提取 -> 7.8
  • cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:N/I:N/A:C
  • cvss_version: NOT_EXTRACTED -> 2.0
  • affected_products_count: 0 -> 56
  • references_count: 80 -> 79
  • data_sources: ['cve'] -> ['cve', 'nvd']