Lucene search
+L

110 matches found

Github Security Blog
Github Security Blog
•added 2026/10/19 5:06 p.m.•1 views

russh: Unbounded memory allocation in agent protocol server via crafted constraint records

Summary russhkeys::agent::server::addkey russh/src/keys/agent/server.rs:271-319 spawns a dedicated tokio task for every 5-byte SSHAGENTCONSTRAINLIFETIME record attached to an added key, each cloning the key blob and sleeping for the declared lifetime up to 136 years. The loop has no per-request...

4.3CVSS6.1AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder