CyberSec.Space Logo
Back to CVE Browser

CVE-2019-14889

HIGH
8.8
CVSS Severity Score
EPSS Score0.0860%
EPSS Percentile12.58th
PublishedDec 10, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.

Affected Platforms (CPE)

📦
Libssh

Libssh

< 0.8.8
📦
Libssh

Libssh

>= 0.9.0 and < 0.9.3
💻
Canonical

Ubuntu Linux

= 16.04
💻
Canonical

Ubuntu Linux

= 18.04
💻
Canonical

Ubuntu Linux

= 19.04
💻
Canonical

Ubuntu Linux

= 19.10
💻
Opensuse

Leap

= 15.1
💻
Fedoraproject

Fedora

= 30
💻
Fedoraproject

Fedora

= 31
💻
Debian

Debian Linux

= 8.0
📦
Oracle

Mysql Workbench

<= 8.0.19

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00033.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00047.html
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14889
🔗 https://lists.debian.org/debian-lts-announce/2019/12/msg00020.html
🔗 https://lists.debian.org/debian-lts-announce/2023/05/msg00029.html
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JJWJTXVWLLJTVHBPGWL7472S5FWXYQR/
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EV2ONSPDJCTDVORCB4UGRQUZQQ46JHRN/
🔗 https://security.gentoo.org/glsa/202003-27

Related Vulnerabilities

CVE-2018-109339.1

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create c...

CVE-2026-09668.2

A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length inp...

CVE-2012-45607.5

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute a...

CVE-2012-45627.5

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and...