Debian Gnu/Linux Rssh vulnerabilities

2 vulnerabilities

Known vulnerabilities in Debian Gnu/Linux Rssh, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-3463alpinerssh+6
EPSS score
4.87%
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.9.8CVE-2019-3464alpinerssh+6
EPSS score
4.70%
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.