Vulnerability in rssh Package (CVE-2019-3464)
Summary
CVE-2019-3464: Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution o... Affects rssh versions < 2.3.4-r1. Fixed in 2.3.4-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rssh package is a restricted shell that is designed to limit user access to only rsync operations. It provides a secure way to allow users to perform file transfers using rsync without granting them full shell access. However, a vulnerability in the package allows for the execution of arbitrary shell commands, bypassing the restrictions imposed by rssh.
Vulnerability Detail
The vulnerability (CVE-2019-3464) arises due to insufficient sanitization of environment variables passed to rsync. This allows an attacker to bypass the restrictions imposed by rssh and execute arbitrary shell commands. The impact of this vulnerability is significant, as it grants unauthorized access to execute commands on the system, potentially leading to further compromise or unauthorized actions.
How To Fix
Minimum fixed version
2.3.4-r1
This is the first release that contains the fix.
sudo apk add --upgrade rsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the rssh package to the fixed version to address the issue effectively.
Conclusion
The vulnerability in the rssh package (CVE-2019-3464) allows for the execution of arbitrary shell commands, bypassing the intended restrictions. To mitigate this risk, it is crucial to update the rssh package to version 2.3.4-r1 or later. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for rssh →
FAQ
rssh is a restricted shell that limits user access to rsync operations, providing a secure way to perform file transfers.
The vulnerability allows for the execution of arbitrary shell commands, bypassing the restrictions imposed by rssh. This grants unauthorized access to execute commands on the system.
To fix this vulnerability, update the rssh package to version 2.3.4-r1 or later.
No, there is no known workaround for this vulnerability. Updating the rssh package is the recommended solution.
For more information, refer to the CVE-2019-3464 entry at the National Vulnerability Database (NVD).
Related vulnerabilities
Recent vulnerabilities recorded for rssh.
