org.connectbot.sshlib:sshlib@0.1.4
latest version
0.4.1
latest non vulnerable version
first published
5 months ago
latest version published
13 days ago
licenses detected
- [0.1.2,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.connectbot.sshlib:sshlib package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the DER private-key parsing process. An attacker can cause excessive memory allocation and application termination by supplying a specially crafted private-key file with malformed length values. How to fix Memory Allocation with Excessive Size Value? Upgrade | [,0.3.1) |
Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the SSH protocol parsing process. An attacker can cause excessive memory allocation or application termination by sending a malformed SSH packet with oversized inner length or count fields. This is only exploitable if a user or application connects to an attacker-controlled or compromised SSH server. For the agent protocol path, SSH agent forwarding must additionally be enabled. How to fix Memory Allocation with Excessive Size Value? Upgrade | [,0.3.1) |