CVE-2023-35812: 
OpenSSH vulnerability analysis and mitigation

An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, identified as CVE-2023-35812. This vulnerability stems from an incomplete fix for a previous vulnerability (CVE-2019-6111). The issue was disclosed on August 3, 2023, affecting OpenSSH packages in Amazon Linux 1 and Amazon Linux 2 distributions (AWS ALAS).

The vulnerability exists because the previous fix for CVE-2019-6111 only addressed cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N (AWS ALAS).

The vulnerability could allow an attacker to manipulate file names during SCP (Secure Copy) operations when relative paths are used, potentially leading to unauthorized file modifications (AWS ALAS).

The vulnerability requires network access and user interaction, with high attack complexity as indicated by the CVSS vector. The attack requires no privileges but does need user interaction to be successful (AWS ALAS).

Fixed packages have been released with version numbers 7.4p1-22.78.amzn1 for Amazon Linux 1 and 7.4p1-22.amzn2.0.2 for Amazon Linux 2. Users are advised to update to these patched versions (NVD).