Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Ubuntu 19.10: USN-4219-1 Critical: Libssh Remote Command Execution

ubuntu
Calendar Grey December 10, 2019
Dist Ubuntu Esm H88
Dealing with a libssh flaw in Ubuntu's advisory USN-4219-1 emphasizes critical patches. Discover additional details.
libssh could be made to run programs under certain conditions.

Summary

libssh could be made to run programs under certain conditions.

Software Description:

- libssh: A tiny C SSH library

Details:

It was discovered that libssh incorrectly handled certain scp commands. If

a user or automated system were tricked into using a specially-crafted scp

command, a remote attacker could execute arbitrary commands on the server.

Topics%20covered

Topics Covered

security advisory Ubuntu remote command execution arbitrary command execution libssh

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libssh-4                        0.9.0-1ubuntu1.3

Ubuntu 19.04:
  libssh-4                        0.8.6-3ubuntu0.3

Ubuntu 18.04 LTS:
  libssh-4                        0.8.0~20170825.94fa1e38-1ubuntu0.5

Ubuntu 16.04 LTS:
  libssh-4                        0.6.3-4.3ubuntu0.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4219-1

CVE-2019-14889

Severity
critical
Lowest
Low
Medium
High
Critical

December 10, 2019

Topics%20covered

Topics Covered

security advisory Ubuntu remote command execution arbitrary command execution libssh

Package Information

https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3
https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5
https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here