https://vulnerability.circl.lu/sightings/feed 2026-10-01T23:40:23.591753+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0eaf8f59-a1fb-409c-b0f7-8a1ec08fc073/export 2026-10-01T23:40:23.637724+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0eaf8f59-a1fb-409c-b0f7-8a1ec08fc073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102821", "type": "seen", "source": "https://gist.github.com/alon710/1a59d9122240df924fd1e8ee7c340f6b", "content": "# CVE-2026-102821: CVE-2026-102821: Unbounded Memory Exhaustion via CHANNEL_OPEN Flood in russh\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-102821\n\n## Summary\nAn uncontrolled resource consumption vulnerability in the russh library allows remote authenticated attackers to exhaust server memory (heap) by flooding channel open requests during a stalled key re-exchange (rekeying) process, causing a denial of service via Out-of-Memory (OOM) termination.\n\n## TL;DR\nAuthenticated remote peers can trigger unbounded memory growth in russh by starting a rekey, stalling the handshake, and flooding connection-layer packets which accumulate in an undrained heap queue.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 6.5 (Medium)\n- **EPSS Score**: 0.00295\n- **Exploit Status**: No public functional exploit\n- **KEV Status**: Not listed in CISA KEV\n- **Impact**: Denial of Service (Memory Exhaustion / Crash)\n\n## Affected Systems\n\n- Applications and services utilizing the russh SSH library prior to version 0.63.2\n- **russh**: >= 0.58.0, < 0.63.2 (Fixed in: `0.63.2`)\n\n## Mitigation\n\n- Upgrade the russh dependency to version 0.63.2 or later.\n- Configure aggressive inactivity timeouts on SSH connections.\n- Apply network-layer rate limiting on incoming connection flows.\n\n**Remediation Steps:**\n1. Open the Cargo.toml file of your project.\n2. Locate the russh dependency and update the version string to '0.63.2' or later.\n3. Execute the command 'cargo update -p russh' in the terminal to update the lockfile.\n4. Rebuild and redeploy the application.\n\n## References\n\n- [GitHub Security Advisory (GHSA-35g8-35p8-c8fw)](https://github.com/Eugeny/russh/security/advisories/GHSA-35g8-35p8-c8fw)\n- [Official Fix Commit](https://github.com/Eugeny/russh/commit/a282af361ac99bc76b80876d1aae128e89dbf66b)\n- [Official Release Announcement (v0.63.2)](https://github.com/Eugeny/russh/releases/tag/v0.63.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-102821) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-01T14:30:31.000000Z"} 2026-10-01T14:30:31+00:00 https://vulnerability.circl.lu/sighting/68124719-9918-4693-9925-02d6fbcd362f/export 2026-10-01T23:40:23.641581+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "68124719-9918-4693-9925-02d6fbcd362f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102821", "type": "published-proof-of-concept", "source": "https://github.com/Eugeny/russh/security/advisories/GHSA-35g8-35p8-c8fw", "content": "", "creation_timestamp": "2026-09-03T18:37:50.000000Z"} 2026-09-03T18:37:50+00:00