Vulnerability CVE-2019-14889: Information
Description
A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.
Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
---|---|---|---|---|---|---|
libssh | sisyphus | 0.9.3-alt1 | 0.10.6-alt1 | ALT-PU-2019-3261-1 | 242717 | Fixed |
libssh | p10 | 0.9.3-alt1 | 0.10.6-alt1 | ALT-PU-2019-3261-1 | 242717 | Fixed |
libssh | p9 | 0.9.3-alt1 | 0.9.6-alt1 | ALT-PU-2019-3290-1 | 242718 | Fixed |
libssh | p8 | 0.8.8-alt1 | 0.8.8-alt1 | ALT-PU-2020-1469-1 | 247316 | Fixed |
libssh | c10f1 | 0.9.3-alt1 | 0.10.6-alt1 | ALT-PU-2019-3261-1 | 242717 | Fixed |
libssh | c9f2 | 0.9.3-alt1 | 0.10.6-alt1 | ALT-PU-2019-3290-1 | 242718 | Fixed |
mysql-workbench-community | sisyphus | 8.0.20-alt1 | 8.0.33-alt2.2 | ALT-PU-2020-2094-1 | 252776 | Fixed |
mysql-workbench-community | p10 | 8.0.20-alt1 | 8.0.25-alt2 | ALT-PU-2020-2094-1 | 252776 | Fixed |
mysql-workbench-community | p9 | 8.0.20-alt1 | 8.0.25-alt2 | ALT-PU-2020-2183-1 | 252777 | Fixed |
mysql-workbench-community | c10f1 | 8.0.20-alt1 | 8.0.25-alt2 | ALT-PU-2020-2094-1 | 252776 | Fixed |
mysql-workbench-community | c9f2 | 8.0.20-alt1 | 8.0.25-alt3 | ALT-PU-2020-2183-1 | 252777 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14889 |
|
USN-4219-1 |
|
https://www.libssh.org/security/advisories/CVE-2019-14889.txt |
|
openSUSE-SU-2019:2689 |
|
[debian-lts-announce] 20191217 [SECURITY] [DLA 2038-1] libssh security update |
|
openSUSE-SU-2020:0102 |
|
GLSA-202003-27 |
|
N/A |
|
[debian-lts-announce] 20230529 [SECURITY] [DLA 3437-1] libssh security update | |
FEDORA-2019-8b0ad69829 | |
FEDORA-2019-46b6bd2459 |