CVE-2013-4421

NONE

Published Oct 25, 201312y ago · Modified Jun 16, 20262w ago

Published Oct 25, 2013 12y ago

Last Modified Jun 16, 2026 2w ago

Description

The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-189

Affected Products 1

Vendor	Product	Version	Range
dropbear_ssh_project	dropbear_ssh	*	<2013.59

References 10

lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html

Third Party Advisory
lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html

Third Party Advisory
lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html

Third Party Advisory
lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html

Third Party Advisory
secunia.com http://secunia.com/advisories/55173

Third Party Advisory
openwall.com http://www.openwall.com/lists/oss-security/2013/10/11/4

Mailing ListThird Party Advisory
securityfocus.com http://www.securityfocus.com/bid/62958

Third Party AdvisoryVDB Entry
matt.ucc.asn.au https://matt.ucc.asn.au/dropbear/CHANGES

Vendor Advisory
secure.ucc.asn.au https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f

PatchThird Party Advisory
support.citrix.com https://support.citrix.com/article/CTX216642

Third Party Advisory

Remediation

secure.ucc.asn.au https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f

PatchThird Party Advisory