ID:10784 - Exploit for Consuming excessive CPU resources on the target system in OpenSSH - CVE-2016-6515

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to consume excessive CPU resources on the target system.

The vulnerability exists in the crypt(3) function, which accepts passwords longer that 1024 characters in auth_password() function in the auth_passwd.c . A remote unauthenticated attacker can submit a very long string as a password and consume excessive CPU resources.

Successful exploitation of this vulnerability may result in denial of service.

Remediation