Threats tagged 'ghsa-6wm4-w8x6-4vvr'

Apache MINA SSHD's sshd-scp component suffers from uncontrolled resource consumption due to lack of limits on SCP protocol line length. Malicious peers can send excessively long lines without line feeds, causing memory exhaustion and application crashes. Versions up to 2.19.0 and 3.0.0-M1 through 3.0.0-M5 are affected. Upgrading to 2.20.0 or 3.0.0-M6 mitigates this issue by enforcing line length limits.