CVE-2026-54700

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-54700

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54700.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-54700

Aliases

GHSA-ch3q-cw5r-f4hg

Published

2026-10-13T15:53:47Z

Modified

2026-10-15T02:47:27Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation

Details

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can return a small malformed packet whose oversized declarations cause the Kaitai Struct Java runtime to attempt excessive allocation or repeated parsing before detecting truncated input. The general transport path requires a client connection but no authentication or optional feature; malformed SSH-agent messages additionally require SSH agent forwarding. The issue can raise an uncaught OutOfMemoryError and terminate the application process, with no demonstrated confidentiality or integrity impact. This issue is fixed in version 0.3.1.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-20",
        "CWE-789"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54700.json"
}

References

Affected packages

Git / github.com/connectbot/cbssh

Affected ranges

Type

GIT

Repo

https://github.com/connectbot/cbssh

Events

Introduced

Fixed

a08421fbe7cf8b72fa60fb8b2f98fb465dc43fd9

Fixed

f57722866b1526c19ef8937ab0a7f09a5d68c2ad

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "0.3.1"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.2.0

0.2.1

v0.*

v0.3.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54700.json"