Executive brief
Russh has an OOM Denial of Service due to allocation of untrusted amount
Affected products
- crates.io russh
Junglewise Threat Intelligence
CVE-2024-43410: Russh has an OOM Denial of Service due to allocation of untrusted amount
CVE-2024-43410 · Severity: low · CVSS 3.1 · Published 2024-08-14
Technologies: russh (crates.io). Vendors: crates.io.
Related threats
- Russh denial of service via malformed PTY request
- Russh SSH library denial of service via malformed key exchange
- Russh SSH library Curve25519 key exchange denial of service
- Eugeny Russh channel-scoped callback bypass for unopened channels
- Russh resource exhaustion via improper input validation in SSH message handlers