CVE-2025-54804CWE-190

Russh is missing an overflow check during channel windows adjust

Medium · published August 5, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
32.5
In the wild
Unconfirmed
What it is

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an internal state value. This can result in a integer overflow. If the Rust code is compiled with overflow checks, it will panic. A malicious client can crash a server. This is fixed in version 0.54.1.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.5th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-08-05T00:05Z
EPSS history
Timeline
  • 05 AUG 00:05Z
    Russh is missing an overflow check during channel windows adjust
    cvelistv5