GHSA-jmqp-37m5-49wh

sshproxy vulnerable to SSH option injection

Source: GitHub Advisory Database (reviewed) Low CVE-2024-34713

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/cea-hpc/sshproxy	< 1.6.3	1.6.3

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Any user authorized to connect to a ssh server using `sshproxy` can inject options to the `ssh` command executed by `sshproxy`. All versions of `sshproxy` are impacted. ### Patches The problem is patched starting on version 1.6.3 ### Workarounds The only workaround is to use the `force_command` option in `sshproxy.yaml`, but it's rarely relevant. ### References

References

External links from the advisory. They lead to third-party sites.

https://github.com/cea-hpc/sshproxy/security/advisories/GHSA-jmqp-37m5-49wh web
https://nvd.nist.gov/vuln/detail/CVE-2024-34713 advisory
https://github.com/cea-hpc/sshproxy/commit/3b8bccc874dc4ca2c80c956cad65722abb46f0b9 web
https://github.com/cea-hpc/sshproxy/commit/f7eabd05d5f0f951e160293692327cad9a7d9580 web
https://github.com/cea-hpc/sshproxy package