CVE-2026-48108: Improper Input Validation

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, russh did not enforce the SSH identification-string rules as deliberately as OpenSSH. In particular, the server-side identification reader used the same permissive path as the client, allowing...

PT-2017-13958

Name of the Vulnerable Software and Affected Versions PSFTPd version 10.0.4 Build 729 Description A use-after-free issue can be triggered remotely in the SFTP component. This issue can be triggered prior to authentication, allowing for a denial-of-service DoS attack against the service. By sendin...

CVE-2017-15271: Use After Free

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By...