{"vulnerability": "ghsa-vc8p-8pxg-rfwg", "sightings": [{"uuid": "fa6d529b-564b-4a4c-8099-2b5afee3e4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-VC8P-8PXG-RFWG", "type": "seen", "source": "https://gist.github.com/alon710/324e2f3b899f3fc7cc3244012ed256f9", "content": "# GHSA-VC8P-8PXG-RFWG: GHSA-vc8p-8pxg-rfwg: Denial of Service via Integer Overflow and Memory Exhaustion in ConnectBot SSH Client Library\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-06-12\n> **Full Report:** https://cvereports.com/reports/GHSA-VC8P-8PXG-RFWG\n\n## Summary\nAn integer overflow and excessive memory allocation vulnerability in the Distinguished Encoding Rules (DER) private-key parser of ConnectBot SSH Client Library (connectbot/cbssh) allows a local attacker to cause a Denial of Service (DoS) via process termination. By inducing an application utilizing the library to parse a malformed DER-encoded private key file, the library attempts massive memory allocations, triggering an uncaught OutOfMemoryError on the JVM.\n\n## TL;DR\nConnectBot SSH library contains an integer overflow in its DER parser, allowing malformed private keys to trigger an OutOfMemoryError and crash the application.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-190, CWE-770, CWE-400\n- **Attack Vector**: Local (AV:L)\n- **CVSS v4.0 Score**: 6.8\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- ConnectBot SSH Client Library (connectbot/cbssh) versions <= 0.3.0\n- **sshlib**: <= 0.3.0 (Fixed in: `0.3.1`)\n\n## Mitigation\n\n- Enforce strict file size limits (e.g., < 16 KB) on all uploaded or imported private keys before passing them to the parser.\n- Configure the JVM to automatically restart on OutOfMemoryError to recover availability.\n- Upgrade the cbssh library to version v0.3.1 or higher.\n\n**Remediation Steps:**\n1. Identify all occurrences of the vulnerable dependency org.connectbot.sshlib:sshlib in your build configuration files (e.g., pom.xml or build.gradle).\n2. Update the dependency version to 0.3.1 or later.\n3. Recompile and deploy the application to production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-vc8p-8pxg-rfwg](https://github.com/connectbot/cbssh/security/advisories/GHSA-vc8p-8pxg-rfwg)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-VC8P-8PXG-RFWG) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T10:41:12.000000Z"}]}