Lucene search
Veracode Vulnerability DatabaseVERACODE:31538HistoryAug 09, 2021 - 10:38 a.m.
Remote Code Execution (RCE)
2021-08-0910:38:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.004 Low
EPSS
Percentile
73.5%
btrbk is vulnerable to remote code execution. The vulnerability exists due to the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.
| CPE | Name | Operator | Version |
|---|---|---|---|
| btrbk:sid | eq | 0.27.1-1.1 | |
| btrbk:sid | eq | 0.27.1-1 | |
| btrbk:sid | eq | 0.27.1-1.1 | |
| btrbk:sid | eq | 0.27.1-1 | |
| btrbk:bullseye | eq | 0.27.1-1 |
References
github.com/digint/btrbk/blob/master/ChangeLog
github.com/digint/btrbk/commit/58212de771c381cd4fa05625927080bf264e9584
lists.debian.org/debian-lts-announce/2021/09/msg00002.html
lists.fedoraproject.org/archives/list/[email protected]/message/BP2T32JMENJFRP2HWXR7FTTZVRTTPECL/
lists.fedoraproject.org/archives/list/[email protected]/message/LM7GLTUN5YS4KE2RNBX732EAMVVGNEX3/
security-tracker.debian.org/tracker/CVE-2021-38173
Related
cvelist
cvelist
CVE-2021-38173
2021-08-07 18:58:19
nessus
nessus
GLSA-202402-32 : btrbk: Remote Code Execution
2024-02-26 00:00:00
Debian DLA-2755-1 : btrbk - LTS security update
2021-09-06 00:00:00
ubuntucve
ubuntucve
CVE-2021-38173
2021-08-07 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: btrbk-0.31.3-1.fc34
2022-01-19 01:54:35
[SECURITY] Fedora 35 Update: btrbk-0.31.3-1.fc35
2022-01-19 02:12:39
prion
prion
Command injection
2021-08-07 19:15:00
cve
cve
CVE-2021-38173
2021-08-07 19:15:06
debian
debian
[SECURITY] [DLA 2755-1] btrbk security update
2021-09-05 21:47:02
osv
osv
btrbk - security update
2021-09-05 00:00:00
CVE-2021-38173
2021-08-07 19:15:06
nvd
nvd
CVE-2021-38173
2021-08-07 19:15:06
openvas
openvas
Fedora: Security Advisory for btrbk (FEDORA-2022-dc62389784)
2022-01-19 00:00:00
Debian: Security Advisory (DLA-2755-1)
2021-09-06 00:00:00
Fedora: Security Advisory for btrbk (FEDORA-2022-a66734e7a2)
2022-01-20 00:00:00
gentoo
gentoo
btrbk: Remote Code Execution
2024-02-26 00:00:00
debiancve
debiancve
CVE-2021-38173
2021-08-07 19:15:06