CVE-2020-37166

Name of the Vulnerable Software and Affected Versions AbsoluteTelnet version 11.12

Description The software contains a denial of service issue in the SSH2 username input field. Local attackers can cause the application to crash by overwriting the username field with a 1000-byte buffer, leading to unresponsiveness and termination. The affected API endpoint is related to SSH2 username input.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the length of the username input field to less than 1000 bytes.