Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmcg-pw3p-cwjh

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.3

Описание

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

EPSS

Процентиль: 8%
0.00181
Низкий

5.1 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-196

Связанные уязвимости

CVSS3: 6.3
nvd
около 2 месяцев назад

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

EPSS

Процентиль: 8%
0.00181
Низкий

5.1 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-196