Recurrence of OpenSSH command injection vulnerability

What this article shares with you is about the recurrence of OpenSSH command injection loopholes. The editor thinks it is very practical, so I share it with you to learn. I hope you can get something after reading this article.

Introduction to 0x01

OpenSSH is a free and open source implementation of the SSH (Secure SHell) protocol. OpenSSH is a SSH software, and linux/unix uses openssh software to provide SSH services. Scp is the abbreviation of secure copy, and scp is a secure remote file copy command based on ssh login in linux system.

Overview of 0x02 vulnerabilities

The vulnerability number is CVE-2020-15778. Scp in 8.3p1 and previous versions of OpenSSH allows commands to be injected into the scp.c remote function, which can be exploited by an attacker to execute arbitrary commands. At present, most linux systems are affected.

0x03 affects version

OpenSSH