Read the docs
TI-2019-02592 Aliases CVE-2019-3464GHSA-wp4w-52jh-8g3x

Insufficient sanitization of environment variables passed to rsync can bypass the…

Priority MEDIUM 50CWE-665Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

Why it matters now

EPSS 0.04699 91st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DebianrsshAll versions before 2.3.4-5+deb9u2 and 2.3.4-10—No fix listedCNA
  • rssh VendorDebian Affected All versions before 2.3.4-5+deb9u2 and 2.3.4-10 Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:a:pizzashack:rssh:2.3.4:*:*:*:*:*:*:*2.3.4VulnerablePizzashack
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*18.10VulnerableCanonical
  • cpe:2.3:a:pizzashack:rssh:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·Pizzashack
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Versions 18.10 Vulnerable ·Canonical

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Debian GNU/Linux rssh — FEDORA-2019-e47add6b2b

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Debian GNU/Linux rssh — FEDORA-2019-bfb407659e

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →
Show 4 more groups
  • Advisory ·

    Debian GNU/Linux rssh — FEDORA-2019-d1487c13ac

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Debian GNU/Linux rssh — GLSA-202007-29

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Debian GNU/Linux rssh — USN-3946-1

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Debian GNU/Linux rssh — DSA-4382

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2019-02591 Insufficient sanitization of arguments passed to rsync can bypass the restrictions…Priority MEDIUM 50
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3464
  2. 2026-10-03 Alias added: GHSA-wp4w-52jh-8g3x

References

Advisory 9

  • TI-2026-19388 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root"… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-31204 Deserialization of untrusted data in Roundcube Webmail KEVCVSS 3.1CRITICAL 9.9
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23504 Erlang/OTP SSH Vulnerable to Pre-Authentication RCE KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-18529 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
See all 10013 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences