Lucene search

CVE-2019-3463

🗓️ 06 Feb 2019 00:00:00Reported by ubuntu.comType

Insufficient sanitization of arguments in rsync can bypass rssh restrictions, leading to arbitrary shell command execution

Reporter	Title	Published	Views	Family All 37
OSV	CVE-2019-3463	6 Feb 201919:29	–	osv
OSV	rssh - security update	5 Feb 201900:00	–	osv
OSV	rssh - security update	2 Feb 201900:00	–	osv
Debian CVE	CVE-2019-3463	6 Feb 201919:29	–	debiancve
NVD	CVE-2019-3463	6 Feb 201919:29	–	nvd
Prion	Design/Logic Flaw	6 Feb 201919:29	–	prion
Veracode	OS Command Injection	23 Jun 202100:52	–	veracode
Cvelist	CVE-2019-3463	6 Feb 201919:00	–	cvelist
CVE	CVE-2019-3463	6 Feb 201919:29	–	cve
AlpineLinux	CVE-2019-3463	6 Feb 201919:29	–	alpinelinux

Source	Link
tracker	www.tracker.debian.org/news/1026713/accepted-rssh-234-5deb9u2-source-amd64-into-stable-embargoed-stable/
salsa	www.salsa.debian.org/debian/rssh/commit/3536b6d8e77ece7d66215fe1d08cf633d6b1c97b%20(regression%20fix)
ubuntu	www.ubuntu.com/security/notices/USN-3946-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-3463
launchpad	www.launchpad.net/bugs/cve/CVE-2019-3463
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-3463

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	rssh	2.3.4-7ubuntu0.1	UNKNOWN
ubuntu	18.10	noarch	rssh	2.3.4-8ubuntu0.2	UNKNOWN
ubuntu	14.04	noarch	rssh	2.3.4-4+deb8u2build0.14.04.1	UNKNOWN
ubuntu	16.04	noarch	rssh	2.3.4-4+deb8u2build0.16.04.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2019 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS27.5

CVSS39.8

EPSS0.009