The Debian Linux project has made available to the community security updates for Open SSH. The package of OpenSSH has a DoS vulnerability in its signal handler. It has been discovered that the signal handler implemented in the login timeout in the Debian version of OpenSSH server uses functions that are not safe asyncronicas signals (async-signal-safe), which leads to a denial of service vulnerability.

Systems affected by this problem suffer from various processes at sshd zombie state. Over time, a sufficient number of processes that may accumulate in such a way that other access attempts are impossible. The presence of these processes does not indicate active exploitation of this vulnerability.

Package: openssh
Vulnerability: remote
Problem type: unsafe signal handler
Debian-specific: no
CVE Id (s): CVE-2008-4109
Debian Bug: 498678

As solve this problem?

We enter as root and type the following commands to update the database Internet, followed by the installation of the packages are fixed: 

  deathbian: ~ # apt-get update 
  deathbian: ~ # apt-get upgrade


Popularity: 1% [?]