Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability CVE-2002-20001

[bigkeoni64]

Hello - has anyone dealt with this issue in their environment - or know of a remedy/workaround?

[Jitendra Kumar]

https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20021219-ssh-packet.html

[Georg Pauwen]

Hello,

interesting vulnerability. I checked the NIST advisory (linked below), they have a couple of links, such as the Github link (which lists numerous mitigation strategies)...

https://nvd.nist.gov/vuln/detail/CVE-2002-20001#vulnCurrentDescriptionTitle

https://github.com/Balasys/dheater