Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/11 8:29 p.m.18 views

Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input

Summary russh did not enforce the SSH identification-string rules as deliberately as OpenSSH. In particular, the server-side identification reader used the same permissive path as the client, allowing pre-banner lines from clients, and the reader did not enforce a bounded number of pre-banner...

5.3CVSS5.7AI score0.00277EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder