CVE-2023-6004

Name
CVE-2023-6004
Description
A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
secalert@redhat.com https://access.redhat.com/security/cve/CVE-2023-6004
secalert@redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2251110
secalert@redhat.com https://www.libssh.org/security/advisories/CVE-2023-6004.txt
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
secalert@redhat.com https://security.netapp.com/advisory/ntap-20240223-0004/
secalert@redhat.com https://access.redhat.com/errata/RHSA-2024:2504
secalert@redhat.com https://access.redhat.com/errata/RHSA-2024:3233

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* libssh >= 0.8.0 < 0.9.8
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* libssh >= 0.10.0 < 0.10.6

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libssh 3.19-community 0.10.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libssh 3.20-community 0.10.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed