TI-2026-30510 CVE-2026-42189 · GHSA-f5v4-2wr6-hqmg
Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth
Priority HIGH 72
Russh is a Rust SSH client & server library.
Russh Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Russh Project records in CISA KEVNo Russh Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-29059 CVE-2024-43410 · GHSA-vgvv-x7xg-6cqg
Russh has an OOM Denial of Service due to allocation of untrusted amount
Priority HIGH 72
Russh is a Rust SSH client & server library.
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2025-34558 CVE-2025-54804 · GHSA-h5rc-j5f5-3gcm
Russh is missing an overflow check during channel windows adjust
Priority MEDIUM 62
Russh is a Rust SSH client & server library.
TI-2023-12692 CVE-2023-28113 · GHSA-cqvm-j2r2-hwpg
russh may use insecure Diffie-Hellman keys
Priority LOW 27
russh is a Rust SSH client and server library.