Detections
Analytics
EulerOS 2.0 SP8 : libssh (EulerOS-SA-2020-1164)
high Nessus Plugin ID 133998
Synopsis
The remote EulerOS host is missing a security update.Description
According to the version of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerability :- A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.(CVE-2019-14889)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected libssh package.See Also
Plugin Details
Severity: High
ID: 133998
File Name: EulerOS_SA-2020-1164.nasl
Version: 1.8
Type: local
Family: Huawei Local Security Checks
Published: 2/25/2020
Updated: 2/3/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2019-14889
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:huawei:euleros:libssh, cpe:/o:huawei:euleros:2.0
Required KB Items: Host/local_checks_enabled, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 2/25/2020
Reference Information
CVE: CVE-2019-14889
IAVA: 2020-A-0203