Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qcvw-2hm7-q2rp

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.3

Описание

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

EPSS

Процентиль: 8%
0.00181
Низкий

5.1 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-130

Связанные уязвимости

CVSS3: 6.3
nvd
около 1 месяца назад

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.

EPSS

Процентиль: 8%
0.00181
Низкий

5.1 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-130