Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers. This condition can be potentially exploited into a Remote Code Execution vector on the authenticating endpoint.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10654
Reference (s):
- https://docs.pingidentity.com/bundle/pingid/page/hmc1587998527490.html
- https://docs.pingidentity.com/bundle/pingid/page/okt1564020467088.html
- https://www.pingidentity.com/
- https://www.pingidentity.com/en/cloud/pingid.html