Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个SSH2服务器客户端超长字段远程缓冲区溢出漏洞
Vulnerability Description
SSH协议可以使客户端和服务端之间建立加密通信。Rapid7开发了SSHredde测试工具，针对连接初始化，KEY交换，SSH传输层协议密码字段协商等过程进行详细测试。 在测试过程中发现多个SSH2服务器和客户端不正确处理非法或不正确部分字符串(如问候行，KEXINIT包中的所有字符串)长度，远程攻击者可以利用这个漏洞进行拒绝服务攻击或可能以进程权限执行任意代码。 目前没有更详细的漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A