144 matches found
russh: russh: Cryptographic fallback bypass via missing public key validation
A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...
4.3CVSS5.9AI score0.00141EPSS
SaveExploits0References7
20