2 CVEs publicados el 2022-05-13 · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxdebian/debian_linuxfedoraproject/fedorapizzashack/rssh
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2019-3463 | CRITICAL | 9.8 | 4.9% | Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the exe | |
| CVE-2019-3464 | CRITICAL | 9.8 | 4.7% | Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resultin |