Detections
Analytics
Alpine: multiple rssh packages: security update to 2.3.4-r1 (deprecated)
critical Tenable Self-Hosted Container Security Plugin ID 400195
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a
restricted shell that should restrict users to perform only rsync operations, resulting in the execution
of arbitrary shell commands. (CVE-2019-3463)
- Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by
rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the
execution of arbitrary shell commands. (CVE-2019-3464)
- rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command
('Command Injection') vulnerability in allowscp permission that can result in Local command execution.
This attack appear to be exploitable via An authorized SSH user with the allowscp permission.
(CVE-2019-1000018)
See Also
https://git.alpinelinux.org/aports/commit/?id=249796ee8f8d086b4e45169cededc3f81143cf7b
https://git.alpinelinux.org/aports/commit/?id=2bda621555cb3efb08f9cb6e5d01c7bc65751cf1
Plugin Details
Severity: Critical
ID: 400195
Version: Revision 1.24
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.58
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2019-3464
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/22/2021
Vulnerability Publication Date: 1/16/2019