Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Loki SSH write can hang on >4GB data
published 23 days ago
Summary
The Loki software may get stuck when it tries to send a single block of data larger than 4 gigabytes over an SSH connection. The problem causes the program to keep sending empty packets without actually transferring the data, which can block operations that rely on the transfer. Update Loki to a version that fixes the calculation or avoid sending files larger than 4 GB in one write.
What to do
- Update cleanstart loki to version 3.7.1-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | loki |
< 3.7.1-r1 Fix: upgrade to 3.7.1-r1
|
Original advisory text
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
Security vulnerability affects the loki package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published26 Sep 2026
Updated26 Sep 2026
First seen26 Sep 2026
Sources
CLEANSTART-2026-UN89941 · OSV
Track software like this
Free during beta