Executive Summary
| Summary | |
|---|---|
| Title | openssh security, bug fix, and enhancement update |
| Informations | |||
|---|---|---|---|
| Name | RHSA-2013:1591 | First vendor Publication | 2013-11-21 |
| Vendor | RedHat | Last vendor Modification | 2013-11-21 |
| Severity (Vendor) | Low | Revision | 02 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Problem Description: Updated openssh packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: OpenSSH is OpenBSD's Secure Shell (SSH) protocol implementation. These packages include the core files necessary for the OpenSSH client and server. The default OpenSSH configuration made it easy for remote attackers to exhaust unauthorized connection slots and prevent other users from being able to log in to a system. This flaw has been addressed by enabling random early connection drops by setting MaxStartups to 10:30:100 by default. For more information, refer to the sshd_config(5) man page. (CVE-2010-5107) These updated openssh packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes. All openssh users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 908707 - CVE-2010-5107 openssh: Prevent connection slot exhaustion attacks 974096 - Kerberos ticket forwarding does not work if /tmp is polyinstantiated |
Original Source
| Url : https://rhn.redhat.com/errata/RHSA-2013-1591.html |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:19515 | |||
| Oval ID: | oval:org.mitre.oval:def:19515 | ||
| Title: | AIX OpenSSH Vulnerability | ||
| Description: | The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2010-5107 | Version: | 5 |
| Platform(s): | IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1 | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:19595 | |||
| Oval ID: | oval:org.mitre.oval:def:19595 | ||
| Title: | HP-UX Running HP Secure Shell, Remote Denial of Service (DoS) | ||
| Description: | The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2010-5107 | Version: | 12 |
| Platform(s): | HP-UX 11 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:25710 | |||
| Oval ID: | oval:org.mitre.oval:def:25710 | ||
| Title: | SUSE-SU-2013:1345-1 -- Security update for OpenSSH | ||
| Description: | This update for OpenSSH provides the following fixes: * Implement remote denial of service hardening. (bnc#802639, CVE-2010-5107) * Use only FIPS 140-2 approved algorithms when FIPS mode is detected. (bnc#755505, bnc#821039) * Do not link OpenSSH binaries with LDAP libraries. (bnc#826906) Security Issue reference: * CVE-2010-5107 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5107 > | ||
| Family: | unix | Class: | patch |
| Reference(s): | SUSE-SU-2013:1345-1 CVE-2010-5107 | Version: | 3 |
| Platform(s): | SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11 | Product(s): | OpenSSH |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:26218 | |||
| Oval ID: | oval:org.mitre.oval:def:26218 | ||
| Title: | RHSA-2012:0884: openssh security, bug fix, and enhancement update (Low) | ||
| Description: | The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2013:1591-02 CESA-2013:1591 CVE-2010-5107 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 6 CentOS Linux 6 | Product(s): | openssh |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27087 | |||
| Oval ID: | oval:org.mitre.oval:def:27087 | ||
| Title: | DEPRECATED: RHSA-2013:1591 -- openssh security, bug fix, and enhancement update (Low) | ||
| Description: | OpenSSH is OpenBSD's Secure Shell (SSH) protocol implementation. These packages include the core files necessary for the OpenSSH client and server. The default OpenSSH configuration made it easy for remote attackers to exhaust unauthorized connection slots and prevent other users from being able to log in to a system. This flaw has been addressed by enabling random early connection drops by setting MaxStartups to 10:30:100 by default. For more information, refer to the sshd_config(5) man page. (CVE-2010-5107) These updated openssh packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes. All openssh users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2013:1591 CESA-2013:1591 CVE-2010-5107 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 6 CentOS Linux 6 | Product(s): | openssh |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27211 | |||
| Oval ID: | oval:org.mitre.oval:def:27211 | ||
| Title: | ELSA-2013-1591 -- openssh security, bug fix, and enhancement update (low) | ||
| Description: | [5.3p1-94] - use dracut-fips package to determine if a FIPS module is installed (#1001565) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2013-1591 CVE-2010-5107 | Version: | 3 |
| Platform(s): | Oracle Linux 6 | Product(s): | openssh |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2015-05-21 | IAVM : 2015-A-0113 - Multiple Vulnerabilities in Juniper Networks CTPOS Severity : Category I - VMSKEY : V0060737 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2015-04-02 | OpenSSH maxstartup threshold potential connection exhaustion denial of servic... RuleID : 33654 - Revision : 6 - Type : SERVER-OTHER |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2016-03-22 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0038.nasl - Type : ACT_GATHER_INFO |
| 2016-03-10 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0033.nasl - Type : ACT_GATHER_INFO |
| 2016-02-29 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0030.nasl - Type : ACT_GATHER_INFO |
| 2016-02-26 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3521.nasl - Type : ACT_GATHER_INFO |
| 2015-06-30 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL14741.nasl - Type : ACT_GATHER_INFO |
| 2015-01-19 | Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_ssh_20130716.nasl - Type : ACT_GATHER_INFO |
| 2014-11-12 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1591.nasl - Type : ACT_GATHER_INFO |
| 2014-11-08 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1527.nasl - Type : ACT_GATHER_INFO |
| 2014-05-12 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201405-06.nasl - Type : ACT_GATHER_INFO |
| 2014-04-16 | Name : The remote AIX host is running a vulnerable version of OpenSSH. File : aix_openssh_advisory2.nasl - Type : ACT_GATHER_INFO |
| 2013-12-04 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20131121_openssh_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2013-11-29 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1591.nasl - Type : ACT_GATHER_INFO |
| 2013-11-21 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1591.nasl - Type : ACT_GATHER_INFO |
| 2013-08-16 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_openssh-130716.nasl - Type : ACT_GATHER_INFO |
| 2013-07-03 | Name : The remote SSH service is susceptible to a remote denial of service attack. File : openssh_logingrace_dos.nasl - Type : ACT_GATHER_INFO |
| 2013-04-20 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-051.nasl - Type : ACT_GATHER_INFO |
| 2013-02-26 | Name : The remote Fedora host is missing a security update. File : fedora_2013-2206.nasl - Type : ACT_GATHER_INFO |
| 2013-02-13 | Name : The remote Fedora host is missing a security update. File : fedora_2013-2212.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-11-13 13:27:20 |
|
| 2014-02-17 11:57:36 |
|
| 2013-11-21 09:18:22 |
|
