Login Request a demo
RS
Product
rssh
by Debian GNU/Linux · last CVE Feb 6, 2019
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities2Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rssh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-3463
9.8
5%
Feb 6
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations,…
Affected: All versions before 2.3.4-5+deb9u2 and 2.3.4-10
CVE-2019-3464
9.8
5%
Feb 6
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync…
Affected: All versions before 2.3.4-5+deb9u2 and 2.3.4-10
Showing 2