GHSA-rpq3-v334-f5pm
UnknownSummary
When a crafted ed25519 private key containing an insane number of rounds is loaded, net-ssh enters an infinite CPU-time consuming loop for a very long time trying to load the key. The fact that the key is not a real SSH key does not matter in this regard.
Risk Assessment
An attacker can supply a crafted ed25519 key, causing application hang and CPU exhaustion (denial of service) during key loading.
Recommendation
Update net-ssh to a version containing the fix that limits the number of rounds when loading ed25519 keys. Avoid loading keys from untrusted sources.
Other vulnerabilities in net-ssh
See all- GHSA-vxj5-fg65-x765High
net-ssh's host-certificate verifier (`Net::SSH::HostKeyEntries::CertAuthority#matches_key?`) checks exactly two things when a server presents an OpenSSH certificate (`*[email protected]`) under a `@cert-authority` trusted-CA entry: (1) the cert is self-consistently signed (signature_valid).
- GHSA-qpg5-fx6p-8cq3High
In net-ssh, `Service::Forward#initialize` registers server-initiated auth-agent channel handlers unconditionally, so ordinary port forwarding exposes the local SSH agent.
- GHSA-pfqh-p9vh-wx4pUnknown
net-ssh's transport packet reader trusts the 4-byte wire packet length without capping it against RFC 4253 §6.1 (35000 bytes). Pre-KEX (plaintext), a malicious server can declare an arbitrarily large packet length and stream data, causing unbounded client memory growth before authentication.
- GHSA-r75w-7fhp-84w8Unknown
Net::SSH::Transport::ServerVersion#read! appends each received byte to @version until a newline, then copies to @header, with no maximum line length or total byte cap enforced. A malicious server sending a long identification line without LF causes unbounded memory growth.
- GHSA-3x7f-q7wf-fp73Unknown
Shell command injection is possible in Net::SSH::Proxy::Command and Net::SSH::Proxy::Jump. When an application configures a proxy and passes attacker-influenced host, port, or remote_user values to Net::SSH.start (or a jump string to Proxy::Jump.new), shell metacharacters in those values may be interpreted.
- GHSA-ggxh-cfwq-5xqcUnknown
Net::SSH::Transport::Session#poll_message pushes every packet received during key exchange that is not on the "allowed during KEX" list into an unbounded @queue (Array) with no size cap. A malicious server that completes KEXINIT (putting net-ssh into pending KEX) and then floods non-allowed packets can cause unbounded memory growth.
Original NVD description (English source)
## Summary When a crafted ed25519 private key is loaded which contains an insane number of rounds, it will lock net/ssh in an infinite CPU-time consuming loop for a very long time trying to load the key. That the key itself is not a real ssh key does not matter in this regard. ## Impact The resul
Vulnerability data from NVD (NIST) · CISA KEV · EPSS