Eugeny

Vulnerabilities related to Eugeny 4

• Low 2.3 pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant instance. From 0.2.0 until 0.2.5, PageantStream::new in pageant/src/wmmessage.rs trusts a peer-controlled four-byte length prefix and buffers until len + 4 byte... CVE-2026-116775 05:27
• Medium 4.3 russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximum_packet_size of zero and passes it into ChannelTx::poll_writable in russh/src/channels/io/tx.rs. The Channel::data, Channel:... CVE-2026-116774 05:25
• Medium 4.3 russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process_packet path in russh/src/client/encrypted.rs accepts repeated packets encoded with russh's private msg::EXT_INFO = 7 before authentication, while the standar... CVE-2026-116773 05:23
• Low 3.3 russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh::keys::agent::server::serve in russh/src/keys/agent/server.rs accepts repeated SSH_AGENT_CONSTRAIN_CONFIRM records while adding a key and appends every Constraint::Confirm record... CVE-2026-116696 05:14