Lucene search

K
freebsdFreeBSDB5E22EC5-BC4B-11EE-B0B5-B42E991FC52E
HistoryNov 28, 2023 - 12:00 a.m.

rclone -- Multiple vulnerabilities

2023-11-2800:00:00
vuxml.freebsd.org
8
rclone
vulnerabilities
ssh
golang
http request body disclosure
go-resty
bypass integrity checks
ssh transport protocol

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

Multiple vulnerabilities in ssh and golang

      CVE-2023-45286: HTTP request body disclosure in go-resty
      disclosure across requests.
    

      CVE-2023-48795: The SSH transport protocol with certain
      OpenSSH extensions, found in OpenSSH before 9.6 and
      other products, allows remote attackers to bypass
      integrity checks.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchrclone< 1.65.1UNKNOWN

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%