Debian Gnu/Linux vulnerabilities
4 vulnerabilities
Known vulnerabilities in Debian Gnu/Linux products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Rssh2 vulnerabilities
- Apt As Used In Debian Stretch And Ubuntu1 vulnerabilities
- Tmpreaper1 vulnerabilities
CVE-2019-3463alpinerssh+6
EPSS score4.87%
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.CVE-2019-3461debiantmpreaper+4EPSS score0.25%
Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.CVE-2019-3464alpinerssh+6EPSS score4.70%
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.CVE-2019-3462canonicalubuntu_linux+7EPSS score14.56%
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.