Lucene search

K
osvGoogleOSV:GHSA-2M39-62FM-Q8R3
HistoryAug 15, 2018 - 1:22 p.m.

Regular Expression Denial of Service in sshpk

2018-08-1513:22:23
Google
osv.dev
14

0.002 Low

EPSS

Percentile

54.1%

Versions of sshpk before 1.13.2 or 1.14.1 are vulnerable to regular expression denial of service when parsing crafted invalid public keys.

Recommendation

Update to version 1.13.2, 1.14.1 or later.

CPENameOperatorVersion
sshpklt1.13.2