CVE-2019-3463

2019-02-0619:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.019 Low

EPSS

Percentile

88.6%

JSON

Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.13-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.14-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.15-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.16-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.17-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.18-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.19-mainnoarchrssh< 2.3.4-r2UNKNOWN
Alpine3.20-mainnoarchrssh< 2.3.4-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.13-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.14-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.15-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.16-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.17-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.18-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.19-main	noarch	rssh	< 2.3.4-r2	UNKNOWN
Alpine	3.20-main	noarch	rssh	< 2.3.4-r2	UNKNOWN