CVE-2020-15778: OS Command Injection
First published: Fri Jul 24 2020(Updated: )
** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Guardium Insights | <=2.0.2 | |
| Openbsd Openssh | <8.3 | |
| Openbsd Openssh | =8.3 | |
| Openbsd Openssh | =8.3-p1 | |
| Netapp A700s Firmware | ||
| Netapp A700s | ||
| Netapp Active Iq Unified Manager Vmware Vsphere | >=9.5 | |
| Netapp Hci Management Node | ||
| Netapp Solidfire | ||
| Netapp Steelstore Cloud Integrated Storage | ||
| Netapp Hci Compute Node | ||
| Netapp Hci Storage Node | ||
| Broadcom Fabric Operating System | ||
| <8.3 | ||
| =8.3 | ||
| =8.3-p1 | ||
| All of | ||
| >=9.5 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://exchange.xforce.ibmcloud.com/vulnerabilities/185805
- https://www.ibm.com/support/pages/node/6403463 (Advisory)
- https://github.com/cpandya2909/CVE-2020-15778/
- https://news.ycombinator.com/item?id=25005567
- https://security.gentoo.org/glsa/202212-06
- https://security.netapp.com/advisory/ntap-20200731-0007/
- https://www.openssh.com/security.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1860488
- https://github.com/cpandya2909/CVE-2020-15778
- https://access.redhat.com/articles/5284081
- https://access.redhat.com/security/cve/cve-2020-15778
- https://access.redhat.com/errata/RHSA-2024:3166
- https://bugzilla.redhat.com/show_bug.cgi?id=1860487
Frequently Asked Questions
What is CVE-2020-15778?
CVE-2020-15778 is a vulnerability in OpenSSH that could allow a remote attacker to execute arbitrary commands on the system.
What is the severity of CVE-2020-15778?
The severity of CVE-2020-15778 is high, with a severity value of 7.8.
How does CVE-2020-15778 work?
CVE-2020-15778 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.
What is the affected software?
The affected software includes OpenSSH version 8.3 and Netapp A700s Firmware.
How can I fix CVE-2020-15778?
To fix CVE-2020-15778, it is recommended to apply the necessary patches provided by the vendor.
- agent/type
- agent/weakness
- agent/author
- agent/status
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/description
- agent/references
- agent/first-publish-date
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-15778
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/trending
- status/disputed
- vendor/openbsd
- canonical/openbsd openssh
- version/openbsd openssh/8.3
- version/openbsd openssh/8.3-p1
- vendor/netapp
- canonical/netapp a700s firmware
- canonical/netapp a700s
- canonical/netapp active iq unified manager vmware vsphere
- version/netapp active iq unified manager vmware vsphere/9.5
- canonical/netapp hci management node
- canonical/netapp solidfire
- canonical/netapp steelstore cloud integrated storage
- canonical/netapp hci compute node
- canonical/netapp hci storage node
- vendor/broadcom
- canonical/broadcom fabric operating system
- vendor/ibm
- canonical/ibm security guardium insights
- version/ibm security guardium insights/2.0.2