GHSA-cvxm-8hgf-6m6mMediumCVSS 7.8
scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...
🔗 CVE IDs covered (1)
📋 Description
scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2020-15778
- https://news.ycombinator.com/item?id=25005567
- https://www.openssh.com/security.html
- https://security.gentoo.org/glsa/202212-06
- https://github.com/cpandya2909/CVE-2020-15778
- https://security.netapp.com/advisory/ntap-20200731-0007
- https://access.redhat.com/errata/RHSA-2024:3166
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://github.com/advisories/GHSA-cvxm-8hgf-6m6m