Buffer overflow in OpenSSH Challenge-response

Integer overflow during challenge-response processing. Buffer overflow on large number of responses...