CVE-2023-6004

Name
CVE-2023-6004
Description
A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
vdb-entry https://access.redhat.com/security/cve/CVE-2023-6004
issue-tracking https://bugzilla.redhat.com/show_bug.cgi?id=2251110
secalert@redhat.com https://www.libssh.org/security/advisories/CVE-2023-6004.txt
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
secalert@redhat.com https://security.netapp.com/advisory/ntap-20240223-0004/
vendor-advisory https://access.redhat.com/errata/RHSA-2024:2504
vendor-advisory https://access.redhat.com/errata/RHSA-2024:3233
af854a3a-2127-422b-91ae-364da2661108 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/

Match rules

CPE URI Source package Min version Max version
cpe:/a:redhat:enterprise_linux:8::appstream shopxo >= 0:0.9.6-14.el8 < *
cpe:/o:redhat:enterprise_linux:9::baseos shopxo >= 0:0.10.4-13.el9 < *

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libssh edge-community 0.10.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libssh 3.22-community 0.10.6-r0 None fixed
libssh 3.21-community 0.10.6-r0 None fixed
libssh 3.20-community 0.10.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libssh 3.19-community 0.10.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed