Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.
| CVE | CVE-2019-3464 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 4.7% en 30 días (percentil 91) |
| CWE | CWE-665 |
| Exposición (Shodan) | 41 host(s) expuesto(s) en internet ahora mismo |
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxdebian/debian_linuxfedoraproject/fedorapizzashack/rssh