Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo

russh

cargo

A client and server SSH library.

View on github.com · View on crates.io

Security Advisories for russh in cargo

Moderate
5 days ago

russh: Unbounded memory allocation in agent protocol server via crafted constraint records GSA_kwCzR0hTQS00d2M1LWYycmMtcTc0bc4AB-WA

cargo russh
Low
5 days ago

A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request GSA_kwCzR0hTQS1qN2gyLTY2ajQtZ2hqZs4AB-V_

cargo russh
Moderate
23 days ago

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey GSA_kwCzR0hTQS0zNWc4LTM1cDgtYzhmd84AB7RZ

cargo russh
Low
23 days ago

russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic GSA_kwCzR0hTQS1wOHF4LWg1NDctZmp3Oc4AB7RT

cargo russh
High
23 days ago

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened GSA_kwCzR0hTQS00N2h3LWd2cTUtcjJnbc4AB7RS

cargo russh
Moderate
23 days ago

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange GSA_kwCzR0hTQS13M2pnLXBqeGYtNzNwNM4AB7RR

cargo russh
Low
23 days ago

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path GSA_kwCzR0hTQS1nNnhtLWY5eHAtcXEzNc4AB7RQ

cargo russh
Moderate
3 months ago

Russh: Channel-scoped server callbacks can be reached without an open channel GSA_kwCzR0hTQS1tNjVyLXJwcmotcjVyZ84ABhGQ

cargo russh
Moderate
3 months ago

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS) GSA_kwCzR0hTQS1nOWh2LXgyMzYtNHFwM84ABfrA

cargo russh
Moderate
3 months ago

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records GSA_kwCzR0hTQS1jcWpjLXJtcHEteHBycc4ABfq_

cargo russh
Moderate
3 months ago

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB) GSA_kwCzR0hTQS01eHZxLWNwOXgtNnA2cs4ABfq-

cargo russh
High
4 months ago

Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds GSA_kwCzR0hTQS00cjNjLTVocGctNThxcs4ABYkl

cargo russh
Moderate
4 months ago

Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input GSA_kwCzR0hTQS03NnI2LXg5N3AtNjd2cs4ABYkj

cargo russh
Moderate
4 months ago

Russh: Unchecked keyboard-interactive prompt count in client auth path GSA_kwCzR0hTQS1nOWc3LTVjZ3ctNnYyOM4ABYki

cargo russh
Moderate
5 months ago

russh server userauth state is not reset when authentication principal changes GSA_kwCzR0hTQS1ocHY0LTVoNmYtd3FyM84ABXwB

cargo russh
High
5 months ago

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets GSA_kwCzR0hTQS13d3g2LXgyOHgtODI1Oc4ABXwA

cargo russh
High
5 months ago

Russh: Unchecked CryptoVec allocation and growth handling is reachable GSA_kwCzR0hTQS1nOWY4LXdxajktZmp3Nc4ABXOb

cargo russh, russh-cryptovec
High
6 months ago

russh has pre-auth DoS via unbounded allocation in its keyboard-interactive auth handler GSA_kwCzR0hTQS1mNXY0LTJ3cjYtaHFtZ84ABVwp

cargo russh
Moderate
about 1 year ago

russh is missing overflow checks during channel windows adjust GSA_kwCzR0hTQS1oNXJjLWo1ZjUtM2djbc4ABKwp

cargo russh
High
about 2 years ago

Russh has an OOM Denial of Service due to allocation of untrusted amount GSA_kwCzR0hTQS12Z3Z2LXg3eGctNmNxZ84AA-q_

cargo russh
Moderate
almost 3 years ago

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin GSA_kwCzR0hTQS00NXg3LXB4MzYteDh3OM4AA34H

go, pypi, cargo golang.org/x/crypto, paramiko, russh
Moderate
over 3 years ago

russh may use insecure Diffie-Hellman keys GSA_kwCzR0hTQS1jcXZtLWoycjItaHdwZ84AAyK1

cargo russh

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 13 High 6 Low 3