CVE-2006-5051

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

45.58% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 98.7% of scored records. A rank, not a probability.

NVD base score

8.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2006-09-27 23:00Z20 YR AGO

Last updated

2024-08-07 19:32Z2 YR AGO

Reserved

2006-09-27

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-415Double FreeVariant

Data version

5.1

Document digest

2121a4528815d6240532171bbf948c067bd9aa21641ee7f07411c994b95a14d2

• security.freebsd.orgFreeBSD-SA-06:22http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.ascvendor-advisory
• sourceforge.nethttp://sourceforge.net/forum/forum.php?forum_id=681763
• secunia.com22270http://secunia.com/advisories/22270third-party-advisory
• www.arkoon.frhttp://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf
• www.ubuntu.comUSN-355-1http://www.ubuntu.com/usn/usn-355-1vendor-advisory
• lists.freebsd.org[freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.opensshhttp://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.htmlmailing-list
• www.vmware.comhttp://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
• oval.cisecurity.orgoval:org.mitre.oval:def:11387https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387vdb-entrysignature
• openssh.orghttp://openssh.org/txt/release-4.4
• secunia.com24805http://secunia.com/advisories/24805third-party-advisory
• www.kb.cert.orgVU#851340http://www.kb.cert.org/vuls/id/851340third-party-advisory
• www.openbsd.org[2.9] 015: SECURITY FIX: October 12, 2006http://www.openbsd.org/errata.html#sshvendor-advisory
• secunia.com22487http://secunia.com/advisories/22487third-party-advisory
• www.us-cert.govTA07-072Ahttp://www.us-cert.gov/cas/techalerts/TA07-072A.htmlthird-party-advisory
• www.arkoon.frhttp://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf
• security.gentoo.orgGLSA-200611-06http://security.gentoo.org/glsa/glsa-200611-06.xmlvendor-advisory
• www.novell.comSUSE-SA:2006:062http://www.novell.com/linux/security/advisories/2006_62_openssh.htmlvendor-advisory
• secunia.com22362http://secunia.com/advisories/22362third-party-advisory
• secunia.com23680http://secunia.com/advisories/23680third-party-advisory
• lists.apple.comAPPLE-SA-2007-03-13http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlvendor-advisory
• docs.info.apple.comhttp://docs.info.apple.com/article.html?artnum=305214
• secunia.com22352http://secunia.com/advisories/22352third-party-advisory
• www.vupen.comADV-2006-4329http://www.vupen.com/english/advisories/2006/4329vdb-entry
• secunia.com22236http://secunia.com/advisories/22236third-party-advisory
• secunia.com24799http://secunia.com/advisories/24799third-party-advisory
• www.vupen.comADV-2006-4018http://www.vupen.com/english/advisories/2006/4018vdb-entry
• secunia.com22495http://secunia.com/advisories/22495third-party-advisory
• exchange.xforce.ibmcloud.comopenssh-signal-handler-race-condition(29254)https://exchange.xforce.ibmcloud.com/vulnerabilities/29254vdb-entry
• www.securityfocus.com20241http://www.securityfocus.com/bid/20241vdb-entry
• www.vupen.comADV-2007-1332http://www.vupen.com/english/advisories/2007/1332vdb-entry
• www.osvdb.org29264http://www.osvdb.org/29264vdb-entry
• secunia.com22823http://secunia.com/advisories/22823third-party-advisory
• ftp.freebsd.orgFreeBSD-SA-06:22.opensshftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.ascvendor-advisory
• slackware.comSSA:2006-272-02http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566vendor-advisory
• www.redhat.comRHSA-2006:0697http://www.redhat.com/support/errata/RHSA-2006-0697.htmlvendor-advisory
• www.openpkg.orgOpenPKG-SA-2006.022http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.htmlvendor-advisory
• secunia.com22183http://secunia.com/advisories/22183third-party-advisory
• marc.info[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 releasedhttp://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2mailing-list
• www.vupen.comADV-2007-0930http://www.vupen.com/english/advisories/2007/0930vdb-entry
• www-unix.globus.org[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerabilityhttp://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.htmlmailing-list
• secunia.com22926http://secunia.com/advisories/22926third-party-advisory
• secunia.com22173http://secunia.com/advisories/22173third-party-advisory
• securitytracker.com1016940http://securitytracker.com/id?1016940vdb-entry
• secunia.com22208http://secunia.com/advisories/22208third-party-advisory
• www.vmware.comhttp://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
• secunia.com22245http://secunia.com/advisories/22245third-party-advisory
• patches.sgi.com20061001-01-Pftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.ascvendor-advisory
• secunia.com22196http://secunia.com/advisories/22196third-party-advisory
• www.debian.orgDSA-1212http://www.debian.org/security/2006/dsa-1212vendor-advisory
• www.redhat.comRHSA-2006:0698http://www.redhat.com/support/errata/RHSA-2006-0698.htmlvendor-advisory
• secunia.com22158http://secunia.com/advisories/22158third-party-advisory
• www.mandriva.comMDKSA-2006:179http://www.mandriva.com/security/advisories?name=MDKSA-2006:179vendor-advisory
• www.debian.orgDSA-1189http://www.debian.org/security/2006/dsa-1189vendor-advisory
• support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2006-216.htm
• secunia.com24479http://secunia.com/advisories/24479third-party-advisory
• www.openwall.com[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systemshttp://www.openwall.com/lists/oss-security/2024/07/01/3mailing-list
• www.openwall.com[oss-security] 20240728 Re: Announce: OpenSSH 9.8 releasedhttp://www.openwall.com/lists/oss-security/2024/07/28/3mailing-list
• www.openwall.comhttps://www.openwall.com/lists/oss-security/2024/07/28/3