CyberSecBulletin

Russh Project vulnerabilities

We track 1 vulnerability in Russh Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Russh Project vulnerabilities

  • 7.5 High severity

    russh: Allocation of Resources Without Limits or Throttling

    CVE-2024-43410Eugeny

    Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and poten