A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libssh-configUpgrade libssh-develUpgrade libssh | May 8, 2024 | Jan 3, 2024 |
| Alpine Linux | — | Upgrade libssh | Aug 22, 2024 | Jan 3, 2024 |
| Debian | — | Upgrade libssh | Jan 3, 2024 | Jan 3, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade net-libs/libssh. | Dec 28, 2023 | Dec 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libssh | Mar 13, 2024 | Jan 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libssh | Mar 13, 2024 | Jan 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libssh | Feb 12, 2024 | Jan 3, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade libssh-configUpgrade libsshUpgrade libssh-devel | May 7, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade libssh-debugsourceNo solution existsUpgrade libssh-configUpgrade libssh-develUpgrade libsshUpgrade libssh-debuginfo | May 1, 2024 | Jan 3, 2024 |
| Rocky_linux | — | Upgrade libsshUpgrade libssh-develUpgrade libssh-debuginfoUpgrade libssh-debugsource | Jun 17, 2024 | Jan 3, 2024 |
| Suse | — | Upgrade libssh4-32bitUpgrade libssh-configUpgrade libssh-develUpgrade libssh4 | Jan 19, 2024 | Jan 3, 2024 |
| Ubuntu | — | Upgrade libssh-4Upgrade libssh-gcrypt-4 (Ubuntu Pro)Upgrade libssh-4 (Ubuntu Pro) | Jan 23, 2024 | Jan 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub