Handler on Duty: Guy Bruneau
Threat Level: green
| Published | 2026-09-02 20:17:36 |
|---|---|
| Last Modified | 2026-09-02 20:17:36 |
| AKA | CVE-2026-56855 |
| Summary | Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking. |
| Access Vector | Local | Adjacent | Network |
|---|---|---|---|
| Access Complexity | Low | Medium | High |
| Authentication | None | Single | Multiple |
| Confidentiality | None | Partial | Complete |
| Integrity | None | Partial | Complete |
| Availability | None | Partial | Complete |
