Project

General

Profile

Actions
Copy link

Security #6799

closed

ssh: quadratic complexity in overlong banner

Added by Philippe Antoine 3 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Affected Versions:
Label:
CVE:
2024-28870
Git IDs:
Severity:
CRITICAL
Disclosure Date:
05/22/2024

Description

Found by oss-fuzz:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66928

Subtasks 2 (0 open — 2 closed)

Security #6800: ssh: quadratic complexity in overlong banner (6.0.x backport)ClosedPhilippe AntoineActions
Security #6801: ssh: quadratic complexity in overlong banner (7.0.x backport)ClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by OISF Ticketbot 3 months ago

  • Subtask #6800 added
Actions
Copy link
 #2

Updated by OISF Ticketbot 3 months ago

  • Label deleted (Needs backport to 6.0)
Actions
Copy link
 #3

Updated by OISF Ticketbot 3 months ago

  • Subtask #6801 added
Actions
Copy link
 #4

Updated by OISF Ticketbot 3 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #5

Updated by Philippe Antoine 3 months ago

  • Status changed from New to In Review

Gitlab MR

Actions
Copy link
 #6

Updated by Victor Julien 2 months ago

  • Severity changed from MODERATE to CRITICAL

Denial of service in protocol enabled by default, so critical.

Actions
Copy link
 #7

Updated by Victor Julien about 2 months ago

  • CVE set to 2024-28870
Actions
Copy link
 #8

Updated by Victor Julien about 2 months ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF