Executive Summary

The vulnerability exists in the Russh Rust SSH client and server library versions from 0.34.0 up to but not including 0.61.0. Several message handlers in the library improperly decode attacker-controlled SSH strings, name-lists, and byte fields into owned allocations before applying specific bounds checks. This means a remote SSH peer can send oversized, high-fanout, or malformed length-prefixed fields that cause the library to allocate or attempt to allocate excessive memory or improperly split data before rejecting the input. This flaw could lead to resource exhaustion or other issues.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing a remote attacker to cause the Russh library to allocate excessive memory or process malformed data, potentially leading to denial of service (DoS) conditions. Since the CVSS score rates the impact on availability as high (A:H) and no impact on confidentiality or integrity, the main risk is disruption of service or resource exhaustion on systems using vulnerable versions of the Russh library.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability in the russh Rust SSH client and server library has been patched in version 0.61.0.

To mitigate this vulnerability, you should immediately upgrade any affected russh library versions from 0.34.0 up to but not including 0.61.0 to version 0.61.0 or later.

Useful 0 Not Useful 0