REDHAT-BUG-2480676: Integer Overflow
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2480676?
The severity of REDHAT-BUG-2480676 is classified as medium, rated at 4.
How do I fix REDHAT-BUG-2480676?
To fix REDHAT-BUG-2480676, update your SSH software to incorporate the changes that utilize int64 for size comparisons.
What causes the issue in REDHAT-BUG-2480676?
The issue in REDHAT-BUG-2480676 is caused by an integer overflow in the internal payload size calculation when writing data larger than 4GB.
What impact does REDHAT-BUG-2480676 have on SSH channel operations?
REDHAT-BUG-2480676 can cause the write loop to spin indefinitely, resulting in the transmission of empty packets without progress.
Is REDHAT-BUG-2480676 related to any coding vulnerabilities?
Yes, REDHAT-BUG-2480676 is related to the CWE of Integer Overflow.