Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:ebuild/net-misc/openssh@4.3_p2-r5

Type ebuild

Namespace net-misc

Name openssh

Version 4.3_p2-r5

Qualifiers

Subpath

Is_vulnerable false

Next_non_vulnerable_version 4.4_p1-r5

Latest_non_vulnerable_version 9.9_p2

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-e4ka-u2kj-2uh1

vulnerability_id VCID-e4ka-u2kj-2uh1

summary sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2006-4924

reference_id

reference_type

scores

value	0.54323
scoring_system	epss
scoring_elements	0.98067
published_at	2026-06-09T12:55:00Z

value	0.54323
scoring_system	epss
scoring_elements	0.98069
published_at	2026-06-06T12:55:00Z

value	0.54323
scoring_system	epss
scoring_elements	0.98068
published_at	2026-06-08T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2006-4924

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4924
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4924

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=207957
reference_id	207957
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=207957

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389995
reference_id	389995
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389995

reference_url	https://security.gentoo.org/glsa/200609-17
reference_id	GLSA-200609-17
reference_type
scores
url	https://security.gentoo.org/glsa/200609-17

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/2444.sh
reference_id	OSVDB-29152;CVE-2006-4924
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/2444.sh

reference_url	https://access.redhat.com/errata/RHSA-2006:0697
reference_id	RHSA-2006:0697
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2006:0697

reference_url	https://access.redhat.com/errata/RHSA-2006:0698
reference_id	RHSA-2006:0698
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2006:0698

reference_url	https://usn.ubuntu.com/355-1/
reference_id	USN-355-1
reference_type
scores
url	https://usn.ubuntu.com/355-1/

fixed_packages

url	pkg:ebuild/net-misc/openssh@4.3_p2-r5
purl	pkg:ebuild/net-misc/openssh@4.3_p2-r5
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/net-misc/openssh@4.3_p2-r5

aliases CVE-2006-4924

risk_score 1.0

exploitability 2.0

weighted_severity 0.5

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4ka-u2kj-2uh1

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-misc/openssh@4.3_p2-r5

Package Instance