CVE-2024-34713 sshproxy vulnerable to SSH option injection
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2024-34713?
CVE-2024-34713 is a low-severity vulnerability in cea-hpc sshproxy, published on 14 May 2024.
Official description
sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. Prior to version 1.6.3, any user authorized to connect to a ssh server using `sshproxy` can inject options to the `ssh` command executed by `sshproxy`. All versions of `sshproxy` are impacted. The problem is patched starting in version 1.6.3. The only workaround is to use the `force_command` option in `sshproxy.yaml`, but it's rarely relevant.
Weakness: CWE-77
Which versions are affected by CVE-2024-34713?
3 open source packages ship an affected version, including github.com/cea-hpc/sshproxy.
| Package | Affected | Fixed in |
|---|---|---|
github.com/cea-hpc/sshproxy Go | All versions | 1.6.3 |
github.com/cea-hpc/sshproxy Go | All versions | 1.6.3 |
github.com/cea-hpc/sshproxy Go | All versions | 1.6.3 |
How do I fix CVE-2024-34713?
Upgrade github.com/cea-hpc/sshproxy to 1.6.3 or later.
Is CVE-2024-34713 being exploited?
There is no known exploitation of CVE-2024-34713 in the wild and no public exploit code.
Sources
Also known as GHSA-jmqp-37m5-49wh, GO-2024-2836.