CVE-2023-28113— russh may use insecure Diffie-Hellman keys
Quick assessment
Affected
warp-tech russh
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
russh是Rust SSH 客户端和服务器端库。 russh 0.34.0版本和0.36.1版本存在数据伪造问题漏洞，该漏洞源于Diffie-Hellman密钥验证不充分，从而导致信息泄露，破坏机密性。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-28113
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
russh may use insecure Diffie-Hellman keys
Source: CVE Program / CVE List V5
Vulnerability Description
russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections between a russh client and server or those of a russh peer with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other implementations reject such keys, so this is mainly an interoperability issue in such a case. This issue is fixed in versions 0.36.2 and 0.37.1
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
russh 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
russh是Rust SSH 客户端和服务器端库。 russh 0.34.0版本和0.36.1版本存在数据伪造问题漏洞，该漏洞源于Diffie-Hellman密钥验证不充分，从而导致信息泄露，破坏机密性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-28113
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-28113
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-28113 (1)
Vendor Advisories for CVE-2023-28113 (1)
Other References for CVE-2023-28113 (4)
IV. Related Vulnerabilities
Same product: russh
-
CVE-2026-102825
Russh: Configured server auth-attempt cap is not enforced in -
CVE-2026-102824
Russh: Missing X25519 zero-point validation in hybrid ML-KEM -
CVE-2026-102823
russh: Client-side channel-scoped Handler callbacks fire for -
CVE-2026-102822
russh: negotiating a MAC-requiring block cipher (CTR/CBC) wi -
CVE-2026-102821
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood du
Same vendor: warp-tech
-
CVE-2026-91167
Warpgate: Missing authorization check on `PUT /users/:id/rol -
CVE-2026-91166
Warpgate: Web SSH stores a jump host's key against the targe -
CVE-2026-91165
Warpgate: Markup injection in SSO form_post return page via -
CVE-2026-91164
Warpgate: API tokens bypass the user's allowed_ip_ranges res -
CVE-2026-63330
Warpgate: Missing Admin Authorization on Live Recording Stre
Same weakness: CWE-20
-
CVE-2026-105117
OpenAM before 16.1.3 Email Content Injection via Users REST -
CVE-2026-63569
MTI/A0 DHAgreement does not validate the peer's ephemeral va -
CVE-2026-55094
Taskcluster: Unauthenticated remote code execution in `web-s -
CVE-2026-47547
NVIDIA驱动固件输入验证漏洞致代码执行 -
CVE-2026-47546
NVIDIA驱动固件输入验证漏洞致代码执行
V. Comments for CVE-2023-28113
No comments yet