CVE-2019-3463: Critical severity Pizzashack Rssh vulnerability
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3463?
CVE-2019-3463 has been classified as a high severity vulnerability due to its potential to allow arbitrary command execution.
How do I fix CVE-2019-3463?
To fix CVE-2019-3463, update the affected rssh package to a patched version that properly sanitizes arguments.
Which software is affected by CVE-2019-3463?
CVE-2019-3463 affects the rssh package in various Linux distributions including Debian, Fedora, and Ubuntu.
What are the risks of not addressing CVE-2019-3463?
Not addressing CVE-2019-3463 can lead to unauthorized system access and execution of arbitrary commands, compromising system integrity.
Is CVE-2019-3463 specific to certain operating system versions?
Yes, CVE-2019-3463 impacts specific versions of Debian, Fedora, and Ubuntu, particularly those using vulnerable rssh configurations.