DOS OpenSSH maxstartup Threshold Connection Exhaustion Denial of Service Vulnerability (CVE-2010-5107)
Severity:
CVE ID:
Rule Protection Details
Description:
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
Impact:
An attacker can launch a denial of service attack by exploiting the vulnerability successfully.
Affected OS:
Network Device, Solaris, FreeBSD, Windows, Mac OS, iOS, Other Unix, Linux, Others, Android