MNBSD-2014-18: sshd libpthread symbol shadowing denial of service

Description

Due to incorrect library ordering while linking sshd(8), symbols in the C library that are shadowed by the POSIX thread library may not be resolved correctly. This could cause a denial of service against connecting clients.

Affected Versions

openssh

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-14:24.sshd.asc
• https://www.cve.org/CVERecord?id=CVE-2014-8475

Additional Information

Aliases: CVE-2014-8475

Published: November 06, 2014
Last Modified: November 06, 2014