cea-hpc/sshproxy · Security
sshproxy vulnerable to SSH option injection
- GHSA ID
- GHSA-jmqp-37m5-49wh
- CVE ID
- CVE-2024-34713
- Severity
- low
- Published
- Updated
- CVSS
- 3.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- CVSS v3
- 3.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Description
Impact
Any user authorized to connect to a ssh server using sshproxy can inject options to the ssh command executed by sshproxy.
All versions of sshproxy are impacted.
Patches
The problem is patched starting on version 1.6.3
Workarounds
The only workaround is to use the force_command option in sshproxy.yaml, but it's rarely relevant.
References
CWEs
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
References
- https://github.com/cea-hpc/sshproxy/security/advisories/GHSA-jmqp-37m5-49wh ↗
- https://nvd.nist.gov/vuln/detail/CVE-2024-34713 ↗
- https://github.com/cea-hpc/sshproxy/commit/3b8bccc874dc4ca2c80c956cad65722abb46f0b9 ↗
- https://github.com/cea-hpc/sshproxy/commit/f7eabd05d5f0f951e160293692327cad9a7d9580 ↗
- https://github.com/advisories/GHSA-jmqp-37m5-49wh ↗