Cisco IOS XR 3.6.x 3.8.x before 3.8.3 and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/ which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections aka Bug ID CSCtd64417.