CVE-2026-73429

Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEXECDHREPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::computesharedsecret function in...

PT-2026-71342

Name of the Vulnerable Software and Affected Versions russh versions prior to 0.62.4 Description A malicious SSH server can crash a client session by sending a malformed KEX ECDH REPLY containing a server ephemeral value that is not 32 bytes long. The Curve25519Kex::compute shared secret function...