Forum: RetroDigital BBS

sslh exploit CVE-2022-4639

From BIG Umberto@3:770/3 to All on Tue Aug 22 20:35:43 2023

CVE-2022-4639

Description:
https://vuldb.com/?id.216497
https://nvd.nist.gov/vuln/detail/CVE-2022-4639

Patch:
https://github.com/yrutschle/sslh https://github.com/yrutschle/sslh/commit/b19f8a6046b080e4c2e28354a58556bb26040c6f

Anyone know how patch version of sslh present into the Raspbian 10.13 (buster) on a PI3 ?

Thank.

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

From Richard Kettlewell@3:770/3 to BIG Umberto on Wed Aug 23 09:07:33 2023

"BIG Umberto" <user@2130706432.invalid> writes:

CVE-2022-4639

Description:
https://vuldb.com/?id.216497
https://nvd.nist.gov/vuln/detail/CVE-2022-4639

Patch:
https://github.com/yrutschle/sslh https://github.com/yrutschle/sslh/commit/b19f8a6046b080e4c2e28354a58556bb26040c6f

Anyone know how patch version of sslh present into the Raspbian 10.13 (buster) on a PI3 ?

https://lists.rutschle.net/mailman/archives/sslh/2022-December/000753.html suggests only v.20-rc1 is impacted.

--
https://www.greenend.org.uk/rjk/

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

From BIG Umberto@3:770/3 to Richard Kettlewell on Wed Aug 23 10:49:15 2023

In date: Wed, 23 Aug 2023 10:07:33 on group: comp.sys.raspberry-pi,
Richard Kettlewell wrote:

"BIG Umberto" <user@2130706432.invalid> writes:

CVE-2022-4639

https://lists.rutschle.net/mailman/archives/sslh/2022-December/000753.html suggests only v.20-rc1 is impacted.

Ok. Thank!

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

From Brian Gregory@3:770/3 to BIG Umberto on Thu Aug 24 23:16:40 2023

On 22/08/2023 21:35, BIG Umberto wrote:

CVE-2022-4639

Description:
https://vuldb.com/?id.216497
https://nvd.nist.gov/vuln/detail/CVE-2022-4639

Patch:
https://github.com/yrutschle/sslh https://github.com/yrutschle/sslh/commit/b19f8a6046b080e4c2e28354a58556bb26040c6f

Anyone know how patch version of sslh present into the Raspbian 10.13 (buster) on a PI3 ?

You'd have to build it from the patched source code.

--
Brian Gregory (in England).

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

Who's Online
Recent Visitors
- Vintagegeek
  Fri Sep 12 05:39:30 2025
  from Swarthmore, Pa via Telnet
- Dextile
  Thu Sep 11 22:46:09 2025
  from Calgary, Ab via Telnet
- Dextile
  Thu Sep 11 21:40:08 2025
  from Calgary, Ab via Telnet
- Dextile
  Thu Sep 11 15:05:03 2025
  from Calgary, Ab via Telnet

System Info

Sysop:	deepend
Location:	Calgary, Alberta
Users:	278
Nodes:	10 (0 / 10)
Uptime:	03:22:47
Calls:	2,369
Files:	5,012
D/L today:	18 files (3,351K bytes)
Messages:	430,742

Synchronet Oneliners
- Vintagegeek@rdbbs
  Fri Aug 22 05:53:33 2025
  OpenWide
- Serpentchain@rdbbs
  Tue Sep 2 20:21:16 2025
  Glowing Apple Hums,
- Serpentchain@rdbbs
  Tue Sep 2 20:21:26 2025
  Telnet Whispers Through The Night,
- Serpentchain@rdbbs
  Tue Sep 2 20:21:35 2025
  BBS Dreams In Code.
- Vintagegeek@rdbbs
  Wed Sep 3 11:26:08 2025
  Heading to Banf f f
- Vintagegeek@rdbbs
  Wed Sep 10 08:01:00 2025
  Calgary next