{"apiVersion":"1.0","identifier":"CVE-2026-73489","description":"Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs stores terminal modes in a fixed 130-entry [(Pty::TTY_OP_END, 0); 130] array but continues increasing the mode count, then constructs an out-of-bounds slice and panics before the application pty_request handler runs. The panic terminates the server session task without causing memory corruption. This issue is fixed in version 0.62.4.","publishedAt":"2026-08-13T22:17:26","lastModifiedAt":"2026-08-17T20:16:46","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73489","cvssScore":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","epssProbability":0.00259,"riskScore":0.44,"affectedProduct":"russh","affectedVersions":"<0.62.4","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-73489","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-73489","en":"https://www.redsauce.net/en/cves/CVE-2026-73489","fr":"https://www.redsauce.net/fr/cves/CVE-2026-73489","pt":"https://www.redsauce.net/pt/cves/CVE-2026-73489","de":"https://www.redsauce.net/de/cves/CVE-2026-73489","sk":"https://www.redsauce.net/sk/cves/CVE-2026-73489","el":"https://www.redsauce.net/el/cves/CVE-2026-73489"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-73489"}}