CVE-2006-5051: Apple Mac OS X

High severity, CVSS 8.1. EPSS: 45% chance of exploitation in the next 30 days.

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

Affected products

• Apple Mac OS X: before 10.3.9 (fixed in 10.3.9); from 10.4, up to and including 10.4.8
• Apple Mac OS X Server: before 10.3.9 (fixed in 10.3.9); from 10.4, up to and including 10.4.8
• Debian Debian Linux: version 3.1 only
• OpenBSD OpenSSH: up to and including 4.4

Published 2006-09-27. Last modified 2026-06-16.