CVE-2013-4421 : The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 al

The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.

Published 2013-10-25 23:55:04

Updated 2018-10-30 16:28:04

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2013-4421

Dropbear Ssh Project » Dropbear Ssh
Versions before (<) 2013.59
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2013-4421

EPSS FAQ

7.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-4421

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2013-4421

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-4421

http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html

openSUSE-SU-2013:1696-1: moderate: update for dropbear
Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html

[SECURITY] Fedora 19 Update: dropbear-2013.59-1.fc19
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/10/11/4

oss-security - Re: CVE Request: dropbear sshd daemon 2013.59 release
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html

openSUSE-SU-2013:1616-1: moderate: update for dropbear
Third Party Advisory

CVEs referencing this url
https://matt.ucc.asn.au/dropbear/CHANGES

Vendor Advisory

CVEs referencing this url
https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f

dropbear: 0bf76f54de6f
Patch;Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html

[SECURITY] Fedora 18 Update: dropbear-2013.59-1.fc18
Third Party Advisory
http://www.securityfocus.com/bid/62958

Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://support.citrix.com/article/CTX216642

Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2013-4421

Products affected by CVE-2013-4421

Exploit prediction scoring system (EPSS) score for CVE-2013-4421

CVSS scores for CVE-2013-4421

CWE ids for CVE-2013-4421

References for CVE-2013-4421