Digint Btrbk vulnerabilities
2 known vulnerabilities affecting digint/btrbk.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2021-38173P2CRITICALCVSS 9.8fixed in 0.31.22021-08-07
CVE-2021-38173 [CRITICAL] CWE-77 CVE-2021-38173: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SS
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.
nvdosv
CVE-2026-62943P2HIGHCVSS 8.7v>= 0.29.0, < 0.32.72026-09-18
CVE-2026-62943 [HIGH] CWE-78 CVE-2026-62943: btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.3
btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's ssh_filter_btrbk.sh constructs allow_stream_match with a start anchor but without an end-of-string anchor for the complete command. A user restricted through an authorized_keys forced command can append a trailing pipe command after a valid
nvd