| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/drakkan/sftpgo | all versions | |
| github.com/drakkan/sftpgo/v2 | < 2.7.5 | 2.7.5 |
A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.
Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free