0.007 Low
EPSS
Percentile
80.7%
A flaw was found with the libssh API function ssh_scp_new(). A user able to connect to a server using SCP could execute arbitrary command using a user-provided path, leading to a compromise of the remote target.
bugzilla.redhat.com/show_bug.cgi?id=1772523
nvd.nist.gov/vuln/detail/CVE-2019-14889
www.cve.org/CVERecord?id=CVE-2019-14889
www.libssh.org/security/advisories/CVE-2019-14889.txt