AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-35812

MEDIUM · CVSS 5.3 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-04-03 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.3. It affects Linux.

CVE
CVE-2023-35812
Severity
MEDIUM
CVSS
5.3
EPSS
0.41%
Linux

Original NVD Description

An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111 within these specific packages. The fix had only covered cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. Fixed packages are available with numbers 7.4p1-22.78.amzn1 and 7.4p1-22.amzn2.0.2.