CVE-2019-1000018

moderate-risk

Published 2019-02-04

rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp permission.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (10)

Rssh

Debian Linux

Fedora

Ubuntu Linux

Affected Vendors

Debian Pizzashack Canonical Fedoraproject

References (19)

Mailing List http://seclists.org/fulldisclosure/2021/May/78

Exploit https://esnet-security.github.io/vulnerabilities/20190115_rssh

https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2021-33216%2CCVE-2019-100001...

Mailing List https://lists.debian.org/debian-lts-announce/2019/01/msg00027.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje...

Third Party Advisory https://security.gentoo.org/glsa/202007-29

Third Party Advisory https://usn.ubuntu.com/3946-1/

Third Party Advisory https://www.debian.org/security/2019/dsa-4377

Mailing List http://seclists.org/fulldisclosure/2021/May/78

Exploit https://esnet-security.github.io/vulnerabilities/20190115_rssh

Mailing List https://lists.debian.org/debian-lts-announce/2019/01/msg00027.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.gentoo.org/glsa/202007-29

Third Party Advisory https://usn.ubuntu.com/3946-1/

Third Party Advisory https://www.debian.org/security/2019/dsa-4377

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 1/34 · Minimal

Exposure 16/34 · Moderate