Debian/rust-russh: medium 5.3
Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSH_MSG_KEX_ECDH_INIT with a 32-byte all-zero Q_C value. Curve25519
Action: Upgrade rust-russh to 0.64.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.1-1 | - |
Fixed versions
| 0.64.1-1 |
Sources
published · modified · JSON