Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/30 11:40 p.m.•6 views

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

Summary A russh server can be driven to unbounded heap growth process OOM / kill by a peer that speaks only standard SSH messages, in the default configuration. The peer starts a key re-exchange sends SSHMSGKEXINIT but never sends the follow-up SSHMSGKEXECDHINIT, leaving the server's kex state...

6.5CVSS5.9AI score0.00295EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder