CVE-2022-31124

OpenSSH key parser (openssh_key_parser) contains a vulnerability in which, prior to version 0.0.6, if a key field is shorter than declared, the error message includes the raw field value. An attacker who can modify the declared length of a key’s sensitive field can expose the raw value of that fi...