yrutschle sslh Improper Link Resolution Vulnerability

A vulnerability has been identified in yrutschle sslh versions prior to 2.2.2, related to improper link resolution before file access, commonly known as a 'link following' vulnerability. This issue arises in the 'write_pid_file()' function, which was copied from the Unbound DNS resolver but did not incorporate a crucial security patch. The vulnerability could potentially be exploited to interfere with the PID file management, especially if sslh is run by a user with limited privileges.

Impact

Exploitation of this vulnerability could lead to unintended interference with the PID file management, potentially causing issues with how sslh manages its processes.

Remediation

Users can upgrade to sslh version 2.2.3 or later, which includes the necessary fix for this vulnerability.