138 matches found
CVE-2026-111062
The russh Rust SSH library (versions 0.34.0-beta.1 through 0.63.3 ) contains a flaw in its SSH server implementation where it fails to verify that the signature algorithm in a public-key authentication matches the algorithm named in the authentication request (CWE-347 ). Specifically, the server_...
CVE-2026-111062 A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
russh is a Rust SSH client and server library. From version 0.34.0-beta.1 until version 0.64.0, its SSH server does not require the signature algorithm in a public-key authentication signature to match the algorithm named in the authentication request. A client possessing an authorized RSA privat...
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...
GHSA-J7H2-66J4-GHJF A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...
PT-2026-118002
Details In russh/src/server/encrypted.rs, server read auth request pk 0.63.3, around lines 880-990: The requested algorithm name pubkey algo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkey algo, &pubkey key. The derived hash alg is then dropped...
PT-2026-118097
Name of the Vulnerable Software and Affected Versions russh versions 0.34.0-beta.1 through 0.63.3 Description The SSH server implementation fails to verify that the signature algorithm used in a public-key authentication signature matches the algorithm specified in the authentication request. In...
EulerOS 2.0 SP11 : libssh2 (EulerOS-SA-2026-4250)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...
EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4156)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...
EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4065)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3987)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3921)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1783634800)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783634800 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1784282780)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1784282780 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
UBUNTU-CVE-2026-93994
Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...
CVE-2026-93994 Apache MINA SSHD: Repeated-publickey policy bypass on server
Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...
CVE-2026-93994 Apache MINA SSHD: Repeated-publickey policy bypass on server
Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...
CVE-2026-93994
The Apache MINA SSHD Java library is affected by a partial authentication bypass in versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 . The vulnerability exists in the sshd-core component, where the server fails to enforce that two distinct public keys are used when a multi-authentication policy (e....
CVE-2026-94053
The Apache MINA SSHD Java library is vulnerable to an authentication bypass via LDAP injection within the optional sshd-ldap component. The root cause is a lack of proper escaping for LDAP filter metacharacters, which allows an attacker to successfully authenticate using the username "" and passw...
Hybrid Encapsulation from Seed Panics on Short Seed
For a hybrid KEM public key of type PublicKey::WingKemDraft06 or PublicKey::X25519MlKem768Draft06, the PublicKey::encapsulatederand function would panic in an indexing operation on a seed input of length shorter than 32 bytes. Impact Applications encapsulating with an attacker controlled seed val...
RUSTSEC-2026-0330 Hybrid Encapsulation from Seed Panics on Short Seed
For a hybrid KEM public key of type PublicKey::WingKemDraft06 or PublicKey::X25519MlKem768Draft06, the PublicKey::encapsulatederand function would panic in an indexing operation on a seed input of length shorter than 32 bytes. Impact Applications encapsulating with an attacker controlled seed val...