Summary
It was discovered that libssh incorrectly handled certain scp commands. If
a user or automated system were tricked into using a specially-crafted scp
command, a remote attacker could execute arbitrary commands on the server.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libssh | 0.6.3-4.3ubuntu0.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | libssh | 0.8.0~20170825.94fa1e38-1ubuntu0.5 |
Vulnerabilities 1
-
High 7.1
A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh …
References
-
report
https://ubuntu.com/security/CVE-2019-14889