Regular Expression Denial of Servicesshpk
sshpk before 1.13.2 or 1.14.1 are vulnerable to regular expression denial of service when parsing crafted invalid public keys.
Update to version 1.13.2, 1.14.1 or later.
Have content suggestions? Send them to [email protected]
publishedAdvisory publishedApr 25th, 2018
reportedInitial report by Сковорода Никита АндреевичApr 24th, 2018