Aris Adamantiadis

**Name of the Vulnerable Software and Affected Versions** libssh versions prior to 0.7.3 **Description** The issue is related to a "bits/bytes confusion bug" in the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. This bug causes ephemeral secrets to be improperly truncated to 128 bits, making it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions. **Recommendations** For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods until a patch is available.