CVE-2021-38173: Command Injection
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using sshfilterbtrbk.sh in authorizedkeys.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/btrbkto a version that resolves this vulnerability.Fixed in 0.26.0-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/btrbkto a version that resolves this vulnerability.Fixed in 0.27.1-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38173?
CVE-2021-38173 has a high severity rating due to its potential for remote command execution.
How do I fix CVE-2021-38173?
To fix CVE-2021-38173, upgrade Btrbk to version 0.31.2 or later.
Which systems are affected by CVE-2021-38173?
CVE-2021-38173 affects Btrbk versions prior to 0.31.2, as well as Debian 9.0 and Fedora 34 and 35.
What type of vulnerability is CVE-2021-38173?
CVE-2021-38173 is classified as a command execution vulnerability.
Is CVE-2021-38173 being actively exploited?
There have been reports indicating that CVE-2021-38173 could be actively exploited in the wild.