26 February 2024 Very large OpenSSH vulnerability (02/26/2024)

Hello,

Very bad news today, following the publication of a major security alert with a CVSS index of 9.8. As a reminder, the CVSS index (Common Vulnerability Scoring System) is a system used to calculate a score assessing the criticality of a vulnerability. The system ranges from 0, virtually zero risk, to 10, critical risk.

This critical flaw comes from the OpenSSH open source tool. It could allow a remote attacker to execute arbitrary commands on the system due to incorrect shell metacharacter validation.

By sending a specially crafted request using expansion tokens, an attacker could exploit this vulnerability to execute arbitrary commands on the system. This flaw is very dangerous, and gayte.it strongly advises you to apply the following PTF patch, which can be found here: https: //lnkd.in/gcWY2V5m

Posted in