CVE-2021-38173: Debian Linux

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.

Affected products

• Debian Debian Linux: version 9.0 only
• Digint Btrbk: before 0.31.2 (fixed in 0.31.2)
• Fedoraproject Fedora: version 34 only; version 35 only

Published 2021-08-07. Last modified 2026-06-17.