CVE-2021-38173

—

CVSS 3.1

9.8 critical

EPSS

3%p87

Published

Aug 7, 2021 (Aug 7, 2021)

Modified

Jun 17, 2026

Description

Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.

Vendors: digint debian fedoraproject
Products: btrbk, debian linux, fedora
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.