CVE-2026-73429 Eugeny CVE debrief

Who should care

Defenders responsible for SSH server and client configurations, particularly those using the Russh library, should be aware of this vulnerability and take steps to update to version 0.62.4 or later. This includes reviewing and validating SSH server configurations, monitoring for potential DoS attacks, and confirming whether affected product deployments exist in managed environments.

Why it matters

CVE-2026-73429 is a vulnerability in the Russh Rust SSH client and server library that can lead to a DoS condition. Defenders should prioritize updating to version 0.62.4 or later.

• Potential DoS attacks against SSH servers and clients
• Need to validate SSH server configurations
• Requirement to update Russh to version 0.62.4 or later

Technical summary

The Russh Rust SSH client and server library prior to version 0.62.4 is vulnerable to a DoS attack due to a lack of validation in the Curve25519Kex::compute_shared_secret function. This function passes the decoded exchange.server_ephemeral value to clone_from_slice without validating its length, causing a deterministic panic before the server host key is verified. The panic terminates the spawned client session task and surfaces as a JoinError, while the embedding process normally remains running. This issue is fixed in version 0.62.4.

Defensive priority

Defenders should prioritize updating Russh to version 0.62.4 or later to prevent potential DoS attacks.

Recommended defensive actions

• Update Russh to version 0.62.4 or later
• Review and validate SSH server configurations
• Monitor for potential DoS attacks
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability is caused by a lack of validation in the Curve25519Kex::compute_shared_secret function, which leads to a deterministic panic when a malformed KEX_ECDH_REPLY message is received. The client-side Curve25519Kex::compute_shared_secret function in russh/src/kex/curve25519.rs passes the decoded exchange.server_ephemeral value to clone_from_slice without validating its length, causing a deterministic panic before the server host key is verified. The panic terminates the spawned client session task and surfaces as a Join,Ev.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.