CVE-2013-4421
dropbear ssh project dropbear ssh: no CVSS score yet. EPSS 6.4% chance of exploitation in the next 30 days.
The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.
- EPSS
- 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dropbear_ssh_project:dropbear_ssh
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html
- http://secunia.com/advisories/55173