Red Hat Security AdvisoryRHSA-2013:1591
openssh security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-94.el6, openssh-askpass-5.3p1-94.el6, openssh-clients-5.3p1-94.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-5.3p1-94.el6, openssh-ldap-5.3p1-94.el6, pam_ssh_agent_auth-0.9.3-94.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-94.el6, openssh-clients-5.3p1-94.el6, openssh-server-5.3p1-94.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-5.3p1-94.el6, openssh-askpass-5.3p1-94.el6, openssh-ldap-5.3p1-94.el6 +1
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-94.el6, openssh-askpass-5.3p1-94.el6, openssh-clients-5.3p1-94.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-5.3p1-94.el6, openssh-ldap-5.3p1-94.el6, pam_ssh_agent_auth-0.9.3-94.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-94.el6, openssh-askpass-5.3p1-94.el6, openssh-clients-5.3p1-94.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-5.3p1-94.el6, openssh-ldap-5.3p1-94.el6, pam_ssh_agent_auth-0.9.3-94.el6
Fixes 1 record
Priority MEDIUM 50
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connecti…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16946 · Published 2013-03-07 · Partial fix CWE-400
