Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability

Bugtraq ID:	62958
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-4421
Remote:	Yes
Local:	No
Published:	Oct 10 2013 12:00AM
Updated:	Apr 13 2015 10:23PM
Credit:	Logan Lamb
Vulnerable:	S.u.S.E. openSUSE 12.3 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Dropbear Dropbear SSH 2013.58
Not Vulnerable:	Dropbear Dropbear SSH 2013.59

Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability

Dropbear SSH is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to exhaust all available memory and cause a denial-of-service condition.

Versions prior to Dropbear SSH 2013.59 are vulnerable.

Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability

An attacker can exploit this issue through readily available tools.

Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva dropbear-2013.59-1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Dropbear SSH 'buf_decompress()' Function Denial of Service Vulnerability

References:

• Dropbear SSH 2013.59 (Dropbear)
  
• Dropbear SSH Server Homepage (Dropbear)
  
• Re: CVE Request: dropbear sshd daemon 2013.59 release (SecLists.Org)
  
• CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)