Input validation error in openssh (Alpine package)

1) Input validation error

EUVDB-ID: #VU33294

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2014-2653

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

Mitigation

Install update from vendor's website.

Vulnerable software versions

openssh (Alpine package): 5.9_p1-r3

CPE2.3

• cpe:2.3:a:alpine:openssh_alpine_package:5.9_p1-r3:*:*:*:*:alpine_linux:*:2.4

External links

https://git.alpinelinux.org/aports/commit/?id=f72e2632c9a10b1e62e73541f2a8c339059a0cd9
https://git.alpinelinux.org/aports/commit/?id=f0dd93f55b93b935b5a4fa4ddcd111965720e11a
https://git.alpinelinux.org/aports/commit/?id=71bd4159f75887e3fa43dc15fb4f42a81feb0467
https://git.alpinelinux.org/aports/commit/?id=981de7de3ea6355a38a838faeafb12e9026e4c07
https://git.alpinelinux.org/aports/commit/?id=23d60a55d9a447ffd99c61c562b58bb3aa66bdce

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.