{"id":"CVE-2026-46673","sourceIdentifier":"security-advisories@github.com","published":"2026-06-10T22:17:00.167","lastModified":"2026-07-23T09:10:00.113","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Russh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked capacity growth, unchecked length arithmetic, and unsafe allocation/locking paths. In current russh releases, local SSH agent peers could still feed attacker-controlled frame lengths into buffer growth before validation. In older russh releases before 0.58.0, remote SSH traffic also reached CryptoVec through transport and compression buffers. This issue has been patched in version 0.60.3."},{"lang":"es","value":"Russh es una biblioteca de cliente y servidor SSH de Rust. Antes de la versión 0.60.3, CryptoVec utilizaba un crecimiento de capacidad sin verificar, aritmética de longitud sin verificar y rutas de asignación/bloqueo inseguras. En las versiones actuales de russh, los pares de agentes SSH locales aún podían introducir longitudes de trama controladas por el atacante en el crecimiento del búfer antes de la validación. En versiones anteriores de russh, antes de la 0.58.0, el tráfico SSH remoto también llegaba a CryptoVec a través de búferes de transporte y compresión. Este problema ha sido parcheado en la versión 0.60.3."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"Eugeny","product":"russh","versions":[{"version":"< 0.60.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-11T14:33:09.287867Z","id":"CVE-2026-46673","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"references":[{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-g9f8-wqj9-fjw5","source":"security-advisories@github.com"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-g9f8-wqj9-fjw5","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}