Summary
It was discovered that btrbk incorrectly filtered SSH commands received
from remote hosts. A remote attacker could possibly use this issue to
execute arbitrary commands.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | btrbk | 0.26.0-1ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | btrbk | 0.27.1-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ss…
References
-
report
https://ubuntu.com/security/CVE-2021-38173