CVE-2010-0137
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4...
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
- Record
CVE-2010-0137- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
- Record
CVE-2010-0137- Updated
- 2026-11-02
EUVDEUVD-2010-0169 No score
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
- Record
EUVD-2010-0169- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhpf-56xh-5j88 No score
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4...
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
- Record
GHSA-qhpf-56xh-5j88- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0137 is a high vulnerability (CVSS 7.8) in Cisco Ios Xr, published January 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.85%, the 86th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2010/0183
exchange.xforce.ibmcloud.com/vulnerabilities/55767
securitytracker.com/id?1023480
cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml
secunia.com/advisories/38227
securityfocus.com/bid/37878
nvd.nist.gov/vuln/detail/CVE-2010-0137
github.com/advisories/GHSA-qhpf-56xh-5j88