asyncssh vulnerabilities (PyPI)
8 vulnerabilities.
-
asyncsshPyPI AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 6.5 Medium -
asyncsshPyPI AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion 5.9 Medium -
asyncsshPyPI AsyncSSH: SCP Path Traversal to Arbitrary File Write 8.1 High -
asyncsshPyPI AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username 8.2 High -
asyncsshPyPI AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC 5.9 Medium -
asyncsshPyPI AsyncSSH Rogue Session Attack 6.8 Medium -
asyncsshPyPI AsyncSSH Rogue Extension Negotiation 5.9 Medium -
asyncsshPyPI AsyncSSH SSH Server Authentication Bypass 9.8 Critical