{"id":"CVE-2026-73429","sourceIdentifier":"security-advisories@github.com","published":"2026-08-12T21:17:41.750","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX_ECDH_REPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::compute_shared_secret function in russh/src/kex/curve25519.rs passes the decoded exchange.server_ephemeral value to clone_from_slice without validating its length, causing a deterministic panic before the server host key is verified. The panic terminates the spawned client session task and surfaces as a JoinError, while the embedding process normally remains running. This issue is fixed in version 0.62.4."},{"lang":"es","value":"Russh es una biblioteca de cliente y servidor Rust SSH. Antes de la versión 0.62.4, un servidor SSH malicioso puede bloquear una sesión de cliente de russh con una KEX_ECDH_REPLY malformada que contiene un valor efímero del servidor que no tiene 32 bytes de longitud. La función Curve25519Kex::compute_shared_secret del lado del cliente en russh/src/kex/curve25519.rs pasa el valor exchange.server_ephemeral decodificado a clone_from_slice sin validar su longitud, causando un pánico determinista antes de que se verifique la clave de host del servidor. El pánico termina la tarea de sesión de cliente generada y se manifiesta como un JoinError, mientras que el proceso de incrustación normalmente permanece en ejecución. Este problema está solucionado en la versión 0.62.4."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"Eugeny","product":"russh","versions":[{"version":"< 0.62.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-14T22:15:11.220092Z","id":"CVE-2026-73429","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-704"},{"lang":"en","value":"CWE-754"}]}],"references":[{"url":"https://github.com/Eugeny/russh/commit/a7fc1eb5717264e31c3c5f7dd849b73989a08f3d","source":"security-advisories@github.com"},{"url":"https://github.com/Eugeny/russh/releases/tag/v0.62.4","source":"security-advisories@github.com"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-g9hv-x236-4qp3","source":"security-advisories@github.com"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-g9hv-x236-4qp3","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}