CVE-2006-4924

CVE-2006-4924 is a high-severity vulnerability in Openbsd Openssh with a CVSS 2.0 base score of 7.8. Its EPSS exploit-prediction score of 35% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-399.

Key facts

• Severity: High (CVSS 2.0 base score 7.8)
• EPSS exploit prediction: 35% (98th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-399
• Affected product: Openbsd Openssh
• Published: 2006-09-27
• Last modified: 2026-06-16

Description

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

Frequently asked questions

What is CVE-2006-4924?

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

How severe is CVE-2006-4924?

CVE-2006-4924 has a CVSS 2.0 base score of 7.8, rated high severity.

Is CVE-2006-4924 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 35% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-4924?

CVE-2006-4924 primarily affects Openbsd Openssh. In total, 56 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2006-4924?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2006-4924 published?

CVE-2006-4924 was published on 2006-09-27 and last updated on 2026-06-16.

References

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc
• ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt
• ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
• http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability
• http://bugs.gentoo.org/show_bug.cgi?id=148228
• http://docs.info.apple.com/article.html?artnum=305214
• http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2
• http://secunia.com/advisories/21923
• http://secunia.com/advisories/22091
• http://secunia.com/advisories/22116
• http://secunia.com/advisories/22158
• http://secunia.com/advisories/22164
• http://secunia.com/advisories/22183
• http://secunia.com/advisories/22196
• http://secunia.com/advisories/22208
• http://secunia.com/advisories/22236
• http://secunia.com/advisories/22245
• http://secunia.com/advisories/22270
• http://secunia.com/advisories/22298
• http://secunia.com/advisories/22352
• http://secunia.com/advisories/22362
• http://secunia.com/advisories/22487
• http://secunia.com/advisories/22495
• http://secunia.com/advisories/22823
• http://secunia.com/advisories/22926
• http://secunia.com/advisories/23038
• http://secunia.com/advisories/23241
• http://secunia.com/advisories/23340

Affected products (56)

• cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*
• cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*

More vulnerabilities in Openbsd Openssh

• CVE-2003-0786 — Critical (CVSS 10.0): The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled,…
• CVE-2003-0693 — Critical (CVSS 10.0): A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to…
• CVE-2002-0640 — Critical (CVSS 10.0): Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large…
• CVE-2001-0144 — Critical (CVSS 10.0): CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH…
• CVE-2000-0999 — Critical (CVSS 10.0): Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers…
• CVE-2000-0525 — Critical (CVSS 10.0): OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute…

All CVEs affecting Openbsd Openssh →

Other CWE-399 (Resource Management Errors) vulnerabilities

• CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
• CVE-2015-0339 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2015-0335 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2015-0333 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2014-4121 — Critical (CVSS 10.0): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized…
• CVE-2014-0560 — Critical (CVSS 10.0): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS…

Browse all CWE-399 (Resource Management Errors) vulnerabilities →

Threat intelligence

Threat-intel indicators referencing this CVE:

• 60.166.8.174 (ipv4-addr)
• 60.166.31.198 (ipv4-addr)
• 112.31.93.229 (ipv4-addr)
• 61.191.145.123 (ipv4-addr)
• 175.203.199.118 (ipv4-addr)
• 14.243.169.55 (ipv4-addr)
• 218.146.45.68 (ipv4-addr)
• 220.179.120.26 (ipv4-addr)