Summary
SFTPGo: Denial of service via malformed SSH channel request
Advisory details
Summary
A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.
Impact
Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.
References
- https://github.com/advisories/GHSA-q7pc-356p-hggc
- https://github.com/drakkan/sftpgo/security/advisories/GHSA-q7pc-356p-hggc
- https://nvd.nist.gov/vuln/detail/CVE-2026-77375
- https://github.com/drakkan/sftpgo/commit/4f751232d7025cf2f7360e01ee8dca81e74b48b0
- https://github.com/drakkan/sftpgo/releases/tag/v2.7.5
Related vulnerabilities
All Supply chain →- HIGHCVE-2026-107211
Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic
- HIGHCVE-2026-107217
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
- MEDIUMCVE-2026-107218
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
- MEDIUMCVE-2026-107220
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
- MEDIUMCVE-2026-107222
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
- MEDIUMCVE-2026-107225
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml