Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个SSH2服务器客户端非法包长度缓冲区溢出漏洞
Vulnerability Description
SSH协议可以使客户端和服务端之间建立加密通信。Rapid7开发了SSHredde测试工具，针对连接初始化，KEY交换，SSH传输层协议密码字段协商等过程进行详细测试。 在测试过程中发现多个SSH2服务器和客户端不正确处理非法长度(如零，负整数长度等)的包和数据元素，远程攻击者可以利用这个漏洞进行拒绝服务攻击或可能以进程权限执行任意代码。 目前没有更详细的漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A