In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade opensshUpgrade openssh-keycatUpgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-clients | May 5, 2026 | May 4, 2026 |
| Alpine Linux | — | Upgrade opensshUpgrade dropbear | Jun 18, 2026 | Apr 2, 2026 |
| Amazon Linux Ami 2 | — | Upgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade openssh-ldapUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-server-sysvinitUpgrade openssh-keycatUpgrade openssh-clients | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade openssh-clientsUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-server-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-keycat-debuginfo | May 4, 2026 | Apr 2, 2026 |
| Debian | — | Upgrade openssh | May 17, 2026 | May 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory21 | May 31, 2026 | May 28, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.3 | Apr 28, 2026 | Apr 2, 2026 |
| Oracle_linux | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-keysignUpgrade opensshUpgrade openssh-keycat | May 6, 2026 | Apr 2, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Apr 2, 2026 |
| Redhat_linux | — | Upgrade openssh-ldapUpgrade openssh-askpass-debuginfoUpgrade openssh-cavs-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-serverUpgrade openssh-keycat-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-debugsourceUpgrade openssh-ldap-debuginfoUpgrade openssh-keycatUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-keysignUpgrade openssh-server-sysvinitUpgrade openssh-server-debuginfoUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-clientsUpgrade openssh-keysign-debuginfo | May 4, 2026 | Apr 2, 2026 |
| Rocky_linux | — | Upgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-clientsUpgrade openssh-clients-debuginfoUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-debugsourceUpgrade openssh-debuginfoUpgrade openssh-cavsUpgrade opensshUpgrade openssh-cavs-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-ldap-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keysignUpgrade openssh-askpass-debuginfo | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-clientUpgrade openssh-server | Apr 29, 2026 | Apr 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub