Threats tagged 'ghsa-9wfm-jcj8-jfv9'

The russh SSH agent server (version prior to 0.65.0) has a vulnerability where it unboundedly allocates memory when processing SSH_AGENT_CONSTRAIN_CONFIRM (0x02) records during key addition requests. Each 1-byte confirm record causes a 56-byte allocation retained for the process lifetime, with no limit on the number of such records per key or the number of keys stored. This can lead to persistent memory growth controlled by any local process able to connect to the agent socket. The issue was fixed in version 0.65.0.