CVE-2010-5107

openssh: Prevent connection slot exhaustion attacks

Published Mar 7, 2013 CVSS 3.1 · 7.5 High EPSS 16.9% KEV · Not listed
Description
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-5067 The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
May 29, 2026, 8:32 PM
Reserved
Apr 30, 2012, 12:00 AM
Status
Modified
Published
Mar 7, 2013, 8:55 PM
Modified
Jun 16, 2026, 11:26 PM
Severity
Low
Public date
Feb 6, 2013, 12:00 AM