The remote host is affected by the vulnerability described in GLSA-202212-06 (OpenSSH: Multiple Vulnerabilities)

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated     that they intentionally omit validation of anomalous argument transfers because that could stand a     great chance of breaking existing workflows. (CVE-2020-15778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K04305530 advisory.

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated     that they intentionally omit validation of anomalous argument transfers because that could stand a     great chance of breaking existing workflows. (CVE-2020-15778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3166 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: scp allows command injection when using backtick characters in the destination argument     (CVE-2020-15778)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - scp in OpenSSH through 8.3p1 allows command injection     in the scp.c toremote function, as demonstrated by     backtick characters in the destination argument. NOTE:
    the vendor reportedly has stated that they     intentionally omit validation of 'anomalous argument     transfers' because that could 'stand a great chance of     breaking existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssh packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - ** DISPUTED ** scp in OpenSSH through 8.3p1 allows     command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination     argument. NOTE: the vendor reportedly has stated that     they intentionally omit validation of 'anomalous     argument transfers' because that could 'stand a great     chance of breaking existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - scp in OpenSSH through 8.3p1 allows command injection     in scp.c remote function, as demonstrated by backtick     characters in the destination argument. NOTE: the     vendor reportedly has stated that they intentionally     omit validation of 'anomalous argument transfers'     because that could 'stand a great chance of breaking     existing workflows.'(CVE-2020-15778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3166 advisory.

    [8.0p1-24.0.1]
    - Update upstream references [Orabug: 36587718]

    [8.0p1-24]
    - Providing a kill switch for scp to deal with CVE-2020-15778       Resolves: RHEL-22870

    [8.0p1-23]
    - Fix Terrapin attack       Resolves: RHEL-19308

    [8.0p1-22]
    - Fix Terrapin attack       Resolves: RHEL-19308
    - Forbid shell metasymbols in username/hostname       Resolves: RHEL-19788

    [8.0p1-21]
    - Using DigestSign/DigestVerify functions for better FIPS compatibility       Resolves: RHEL-5217

    [8.0p1-20]
    - Limit artificial delays in sshd while login using AD user       Resolves: RHEL-1684
    - Add comment to OpenSSH server config about FIPS-incompatible key       Resolves: RHEL-5221
    - Avoid killing all processes on system in case of race condition       Resolves: RHEL-11548
    - Avoid sshd_config 256K limit       Resolves: RHEL-5279
    - Using DigestSign/DigestVerify functions for better FIPS compatibility       Resolves: RHEL-5217
    - Fix GSS KEX causing ssh failures when connecting to WinSSHD       Resolves: RHEL-5321

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:3166 advisory.

  - scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by     backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they     intentionally omit validation of anomalous argument transfers because that could stand a great chance     of breaking existing workflows. (CVE-2020-15778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The IBM Spectrum Protect Plus running on the remote host is affected by a remote command injection vulnerability due to improper input validation in the remote function in scp.c. An unauthenticated, remote attacker can exploit this, by using backtick characters in the destination argument, to execute arbitrary commands on the system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

ID	Name	Product	Family	Published	Updated	Severity
169409	GLSA-202212-06 : OpenSSH: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	12/28/2022	9/11/2023	high
179676	F5 Networks BIG-IP : SCP vulnerability (K04305530)	Nessus	F5 Networks Local Security Checks	8/11/2023	5/7/2024	high
197785	RHEL 8 : openssh (RHSA-2024:3166)	Nessus	Red Hat Local Security Checks	5/23/2024	5/23/2024	high
151035	EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1993)	Nessus	Huawei Local Security Checks	6/28/2021	12/12/2023	high
151168	EulerOS Virtualization for ARM 64 3.0.6.0 : openssh (EulerOS-SA-2021-2018)	Nessus	Huawei Local Security Checks	6/30/2021	12/12/2023	high
151235	EulerOS Virtualization 3.0.6.6 : openssh (EulerOS-SA-2021-2039)	Nessus	Huawei Local Security Checks	7/1/2021	12/11/2023	high
198019	Oracle Linux 8 : openssh (ELSA-2024-3166)	Nessus	Oracle Linux Local Security Checks	5/28/2024	5/28/2024	high
151319	EulerOS Virtualization for ARM 64 3.0.2.0 : openssh (EulerOS-SA-2021-2097)	Nessus	Huawei Local Security Checks	7/2/2021	12/11/2023	high
197680	CentOS 8 : openssh (CESA-2024:3166)	Nessus	CentOS Local Security Checks	5/22/2024	5/22/2024	high
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	4/4/2022	3/27/2024	high
151155	IBM Spectrum Protect Plus OpenSSH Remote Command Injection	Nessus	Misc.	6/30/2021	12/12/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high