The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mosh | Keith_winstein | * | 1.2-2 (including) |
| Mosh | Keith_winstein | 0.98c (including) | 0.98c (including) |
| Mosh | Keith_winstein | 1.0 (including) | 1.0 (including) |
| Mosh | Keith_winstein | 1.1 (including) | 1.1 (including) |
| Mosh | Keith_winstein | 1.1.1 (including) | 1.1.1 (including) |
| Mosh | Keith_winstein | 1.1.2 (including) | 1.1.2 (including) |
| Mosh | Keith_winstein | 1.1.3 (including) | 1.1.3 (including) |
| Mosh | Keith_winstein | 1.1.3-1 (including) | 1.1.3-1 (including) |
| Mosh | Keith_winstein | 1.1.3-2 (including) | 1.1.3-2 (including) |
| Mosh | Keith_winstein | 1.2 (including) | 1.2 (including) |