PT-2023-8206 · Libssh+11 · Libssh+11
Vinci
·
Published
2023-12-18
·
Updated
2025-07-08
·
CVE-2023-6004
CVSS v3.1
4.8
Medium
| Vector | AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
libssh (affected versions not specified)
OpenSSH versions prior to 9.6p1
libssh versions prior to 0.10.6 and 0.9.8
Description
A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the
hostname parameter. The vulnerability is related to the incorrect control of code generation in the ProxyCommand/ProxyJump component of the libssh library.Recommendations
For libssh versions prior to 0.10.6 and 0.9.8, update to version 0.10.6 or 0.9.8 to resolve the issue.
For OpenSSH versions prior to 9.6p1, update to version 9.6p1 to resolve the issue.
As a temporary workaround, consider restricting the use of the ProxyCommand and ProxyJump features until a patch is available.
Avoid using the
hostname parameter in the affected API endpoints until the issue is resolved.Fix
Special Elements Injection
Code Injection
Improper Neutralization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Openssh
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libssh