CVE-2020-9355: Critical severity Networkmanager-ssh Project Networkmanager-ssh vulnerability
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/network-manager-sshto a version that resolves this vulnerability.Fixed in 1.2.10-1+deb10u1Fixed in 1.2.11-1 - Upgrade
Upgrade
ubuntu/network-manager-sshto a version that resolves this vulnerability.Fixed in 1.2.6-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9355?
The severity of CVE-2020-9355 is critical with a CVSS score of 9.8.
How does CVE-2020-9355 allow privilege escalation?
CVE-2020-9355 allows privilege escalation by mishandling extra options.
Which software is affected by CVE-2020-9355?
NetworkManager-ssh versions before 1.2.11 are affected by CVE-2020-9355.
How can I fix CVE-2020-9355?
To fix CVE-2020-9355, upgrade to NetworkManager-ssh 1.2.11 or later.
Where can I find more information about CVE-2020-9355?
You can find more information about CVE-2020-9355 in the following references: [Reference 1](https://github.com/danfruehauf/NetworkManager-ssh/pull/98), [Reference 2](https://github.com/danfruehauf/NetworkManager-ssh/commit/5d88cd89795352b5df54cc0ebb6a0076b8c89ee4), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi?id=1803499).