We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Bugpilot (Bug tracking)

Ok

THREATINT CVE Home CVE Diag Help
PUBLISHED

CVE-2023-35812

Reserved:2023-06-17
Published:2024-04-03
Updated:2024-04-03

Description

An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111 within these specific packages. The fix had only covered cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. Fixed packages are available with numbers 7.4p1-22.78.amzn1 and 7.4p1-22.amzn2.0.2.



MEDIUM: 5.3CVSS:3.1/AC:H/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R

References

https://alas.aws.amazon.com/cve/html/CVE-2023-35812.html

cve.org CVE-2023-35812

nvd.nist.gov CVE-2023-35812

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-35812