Displaying 2 results from an estimated 2 matches for "privsep_is_preauth".
2014 Apr 12
4
[Bug 2225] New: sshd core dumps when used in high scaled environments.
...juniper.net
Created attachment 2424
--> https://bugzilla.mindrot.org/attachment.cgi?id=2424&action=edit
possible fix.
sshd crashes with the core dump when used in high scale environment.
The program crashes inside the function "cleanup_exit" at line
if (use_privsep && privsep_is_preauth && pmonitor->m_pid > 1)
It is always assumed here that pmonitor is always not NULL.
However pmonitor can be null, in the execution sequence below:
#0 0x0804e214 in cleanup_exit (i=255) at
../../../../../../src/crypto/openssh/sshd.c:2415
#1 0x080ae7bf in fatal (fmt=0x80b8ea6 "...
2020 Mar 11
6
[PATCH 0/1] *** SUBJECT HERE ***
Hi,
sifting through my system's logs, I noticed many break-in attempts by
rogue ssh clients trying long lists of common passwords. For some time
now I pondered different approaches to counter these, but could not come
up with a solution that really satisfied me.
I finally reached the conclusion that any countermeasures required
support in sshd itself, and created the attached patch. If