Lucene search
+L

144 matches found

RedHat Linux
RedHat Linux
•added 2026/10/01 5:20 p.m.•3 views

russh: russh: Cryptographic fallback bypass via missing public key validation

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

4.3CVSS5.9AI score0.00141EPSS
SaveExploits0References7
Rows per page
Query Builder