CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalati ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | network-manager-ssh | 1.2.10-1+deb10u1 |
| debian 11 | network-manager-ssh | 1.2.11-1 |
| debian 12 | network-manager-ssh | 1.2.11-1 |
| debian 13 | network-manager-ssh | 1.2.11-1 |
| debian 14 | network-manager-ssh | 1.2.11-1 |
| debian 9 | network-manager-ssh | 1.2.1-1+deb9u1 |
| echo | network-manager-ssh | 1.2.11-1 |
| ubuntu 18.04-ESM | network-manager-ssh | düzeltme belirtilmemiş |
Referanslar
- https://bugzilla.redhat.com/show_bug.cgi?id=1803499
- https://github.com/danfruehauf/NetworkManager-ssh/commit/5d88cd89795352b5df54cc0ebb6a0076b8c89ee4
- https://github.com/danfruehauf/NetworkManager-ssh/pull/98
- https://github.com/danfruehauf/NetworkManager-ssh/releases/tag/1.2.11
- https://www.cve.org/CVERecord?id=CVE-2020-9355
- https://www.debian.org/security/2020/dsa-4637