CVE-2008-5161

19.11.2008, 17:30

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	2.6 UNKNOWN	NETWORK	HIGH	AV:N/AC:H/Au:N/C:P/I:N/A:N
mitre	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 86%

Vendor	Product	Version
openbsd	openssh	4.7p1:p1
ssh	tectia_client	4.0
ssh	tectia_client	4.0.1
ssh	tectia_client	4.0.3
ssh	tectia_client	4.0.4
ssh	tectia_client	4.0.5
ssh	tectia_client	4.2
ssh	tectia_client	4.2.1
ssh	tectia_client	4.3
ssh	tectia_client	4.3.1
ssh	tectia_client	4.3.1j:j
ssh	tectia_client	4.3.2
ssh	tectia_client	4.3.2j:j
ssh	tectia_client	4.3.3
ssh	tectia_client	4.3.4
ssh	tectia_client	4.3.5
ssh	tectia_client	4.3.6
ssh	tectia_client	4.3.7
ssh	tectia_client	4.3.8k:k
ssh	tectia_client	4.3.9k:k
ssh	tectia_client	4.4
ssh	tectia_client	4.4.1
ssh	tectia_client	4.4.2
ssh	tectia_client	4.4.3
ssh	tectia_client	4.4.4
ssh	tectia_client	4.4.6
ssh	tectia_client	4.4.7
ssh	tectia_client	4.4.8
ssh	tectia_client	4.4.9
ssh	tectia_client	4.4.10
ssh	tectia_client	4.4.11
ssh	tectia_client	5.0.0
ssh	tectia_client	5.0.0f:f
ssh	tectia_client	5.0.1
ssh	tectia_client	5.0.1f:f
ssh	tectia_client	5.0.2
ssh	tectia_client	5.0.2f:f
ssh	tectia_client	5.0.3
ssh	tectia_client	5.0.3f:f
ssh	tectia_client	5.1.0
ssh	tectia_client	5.1.1
ssh	tectia_client	5.1.2
ssh	tectia_client	5.1.3
ssh	tectia_client	5.2.0
ssh	tectia_client	5.2.1
ssh	tectia_client	5.2.2
ssh	tectia_client	5.2.3
ssh	tectia_client	5.2.4
ssh	tectia_client	5.3.0
ssh	tectia_client	5.3.1
ssh	tectia_client	5.3.2
ssh	tectia_client	5.3.3
ssh	tectia_client	5.3.5
ssh	tectia_client	5.3.6
ssh	tectia_client	5.3.7
ssh	tectia_client	5.3.8
ssh	tectia_client	6.0.0
ssh	tectia_client	6.0.1
ssh	tectia_client	6.0.2
ssh	tectia_client	6.0.3
ssh	tectia_client	6.0.4
ssh	tectia_connector	4.0.7
ssh	tectia_connector	4.1.2
ssh	tectia_connector	4.1.3
ssh	tectia_connector	4.1.5
ssh	tectia_connector	4.2.0
ssh	tectia_connector	4.3.0
ssh	tectia_connector	4.3.4
ssh	tectia_connector	4.3.5
ssh	tectia_connector	4.4.0
ssh	tectia_connector	4.4.2
ssh	tectia_connector	4.4.4
ssh	tectia_connector	4.4.6
ssh	tectia_connector	4.4.7
ssh	tectia_connector	4.4.9
ssh	tectia_connector	4.4.10
ssh	tectia_connector	5.0.0
ssh	tectia_connector	5.0.1
ssh	tectia_connector	5.0.2
ssh	tectia_connector	5.0.3
ssh	tectia_connector	5.1.0
ssh	tectia_connector	5.1.1
ssh	tectia_connector	5.1.2
ssh	tectia_connector	5.1.3
ssh	tectia_connector	5.2.2
ssh	tectia_connector	5.3.0
ssh	tectia_connector	5.3.1
ssh	tectia_connector	5.3.2
ssh	tectia_connector	5.3.3
ssh	tectia_connector	5.3.7
ssh	tectia_connector	5.3.8
ssh	tectia_connectsecure	6.0.0
ssh	tectia_connectsecure	6.0.1
ssh	tectia_connectsecure	6.0.2
ssh	tectia_connectsecure	6.0.3
ssh	tectia_connectsecure	6.0.4
ssh	tectia_server	4.0
ssh	tectia_server	4.0.3
ssh	tectia_server	4.0.4
ssh	tectia_server	4.0.5
ssh	tectia_server	4.0.7
ssh	tectia_server	4.1.2
ssh	tectia_server	4.1.3
ssh	tectia_server	4.1.5
ssh	tectia_server	4.2.0
ssh	tectia_server	4.2.1
ssh	tectia_server	4.2.2
ssh	tectia_server	4.3
ssh	tectia_server	4.3.0
ssh	tectia_server	4.3.1
ssh	tectia_server	4.3.2
ssh	tectia_server	4.3.3
ssh	tectia_server	4.3.4
ssh	tectia_server	4.3.5
ssh	tectia_server	4.3.6
ssh	tectia_server	4.3.7
ssh	tectia_server	4.4
ssh	tectia_server	4.4.0
ssh	tectia_server	4.4.1
ssh	tectia_server	4.4.2
ssh	tectia_server	4.4.4
ssh	tectia_server	4.4.5
ssh	tectia_server	4.4.6
ssh	tectia_server	4.4.7
ssh	tectia_server	4.4.8
ssh	tectia_server	4.4.9
ssh	tectia_server	4.4.10
ssh	tectia_server	4.4.11
ssh	tectia_server	5.0.0
ssh	tectia_server	5.0.1
ssh	tectia_server	5.0.2
ssh	tectia_server	5.0.3
ssh	tectia_server	5.1.0
ssh	tectia_server	5.1.1
ssh	tectia_server	5.1.1
ssh	tectia_server	5.1.2
ssh	tectia_server	5.1.3
ssh	tectia_server	5.2.0
ssh	tectia_server	5.2.0
ssh	tectia_server	5.2.1
ssh	tectia_server	5.2.2
ssh	tectia_server	5.2.2
ssh	tectia_server	5.2.3
ssh	tectia_server	5.2.4
ssh	tectia_server	5.3.0
ssh	tectia_server	5.3.0
ssh	tectia_server	5.3.1
ssh	tectia_server	5.3.2
ssh	tectia_server	5.3.3
ssh	tectia_server	5.3.4
ssh	tectia_server	5.3.5
ssh	tectia_server	5.3.6
ssh	tectia_server	5.3.7
ssh	tectia_server	5.3.8
ssh	tectia_server	5.4.0
ssh	tectia_server	5.4.1
ssh	tectia_server	5.4.2
ssh	tectia_server	5.5.0
ssh	tectia_server	5.5.1
ssh	tectia_server	6.0.0
ssh	tectia_server	6.0.0
ssh	tectia_server	6.0.1
ssh	tectia_server	6.0.1
ssh	tectia_server	6.0.2
ssh	tectia_server	6.0.3
ssh	tectia_server	6.0.4
ssh	tectia_server	6.0.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openssh

bullseye (security)	1:8.4p1-5+deb11u3 fixed
bullseye	1:8.4p1-5+deb11u3 fixed
bookworm	1:9.2p1-2+deb12u3 fixed
bookworm (security)	1:9.2p1-2+deb12u3 fixed
sid	1:9.9p1-3 fixed
trixie	1:9.9p1-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

openssh

raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	not-affected
natty	not-affected
maverick	not-affected
lucid	not-affected
karmic	ignored
jaunty	ignored
intrepid	ignored
hardy	ignored
gutsy	ignored
dapper	ignored