Asymmetric denial of service - ReDoS In sshpk
Description
Regular Expression Denial of Service in sshpk
Versions of sshpk before 1.13.2 or 1.14.1 are vulnerable to regular expression denial of service when parsing crafted invalid public keys.
Recommendation
Update to version 1.13.2, 1.14.1 or later.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 npm | 1.13.2 | ||
 debian 12 | 1.13.1+dfsg-2 | ||
debian 13 | 1.13.1+dfsg-2 | ||
debian 11 | 1.13.1+dfsg-2 | ||
debian 14 | 1.13.1+dfsg-2 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4.