Bitvise SSH Client 6.x / 7.x < 7.41 Denial of Service (DoS) Vulnerability

medium Nessus Plugin ID 110289

Synopsis

The remote host has an application installed that is affected by a denial of service vulnerability.

Description

The version of Bitvise SSH Client installed on the remote Windows host is 6.x or 7.x prior to 7.41. It is, therefore, affected by a denial of service vulnerability.

Solution

Upgrade to Bitvise SSH Client 7.41 or later.

See Also

http://www.nessus.org/u?6bf2994b

Plugin Details

Severity: Medium

ID: 110289

File Name: bitvise_ssh_client_7_41.nasl

Version: 1.2

Type: local

Agent: windows

Family: Windows

Published: 6/1/2018

Updated: 6/3/2021

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnerability Information

CPE: cpe:/a:bitvise:ssh_client

Required KB Items: SMB/Registry/Enumerated, installed_sw/Bitvise SSH Client

Patch Publication Date: 5/18/2018

Vulnerability Publication Date: 5/18/2018

Reference Information

IAVB: 2018-B-0068-S