Executive brief
russh is missing overflow checks during channel windows adjust
Affected products
- crates.io russh
Junglewise Threat Intelligence
CVE-2025-54804: russh is missing overflow checks during channel windows adjust
CVE-2025-54804 · Severity: low · CVSS 3.1 · Published 2025-08-04
Technologies: russh (crates.io). Vendors: crates.io.
Related threats
- Russh denial of service via malformed PTY request
- Russh SSH library denial of service via malformed key exchange
- Russh SSH library Curve25519 key exchange denial of service
- Eugeny Russh channel-scoped callback bypass for unopened channels
- Russh resource exhaustion via improper input validation in SSH message handlers