The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openssh | Jan 3, 2018 | Oct 26, 2017 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-opensshamazon-linux-ami-2-upgrade-openssh-askpassamazon-linux-ami-2-upgrade-openssh-cavsamazon-linux-ami-2-upgrade-openssh-clientsamazon-linux-ami-2-upgrade-openssh-debuginfoamazon-linux-ami-2-upgrade-openssh-keycatamazon-linux-ami-2-upgrade-openssh-ldapamazon-linux-ami-2-upgrade-openssh-serveramazon-linux-ami-2-upgrade-openssh-server-sysvinitamazon-linux-ami-2-upgrade-pam_ssh_agent_auth | Apr 27, 2020 | Oct 26, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-openssh | May 11, 2018 | Oct 25, 2017 |
| Centos_linux | — | centos-upgrade-opensshcentos-upgrade-openssh-askpasscentos-upgrade-openssh-cavscentos-upgrade-openssh-clientscentos-upgrade-openssh-debuginfocentos-upgrade-openssh-keycatcentos-upgrade-openssh-ldapcentos-upgrade-openssh-servercentos-upgrade-openssh-server-sysvinitcentos-upgrade-pam_ssh_agent_auth | Aug 28, 2019 | Oct 26, 2017 |
| Debian | debian-upgrade-openssh | Feb 25, 2019 | Oct 25, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openssh | Jan 8, 2018 | Oct 25, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-opensshhuawei-euleros-2_0_sp1-upgrade-openssh-askpasshuawei-euleros-2_0_sp1-upgrade-openssh-clientshuawei-euleros-2_0_sp1-upgrade-openssh-keycathuawei-euleros-2_0_sp1-upgrade-openssh-server | May 29, 2018 | Oct 25, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-opensshhuawei-euleros-2_0_sp2-upgrade-openssh-askpasshuawei-euleros-2_0_sp2-upgrade-openssh-clientshuawei-euleros-2_0_sp2-upgrade-openssh-keycathuawei-euleros-2_0_sp2-upgrade-openssh-server | May 29, 2018 | Oct 25, 2017 | |
| Ibm Aix | ibm-aix-openssh_advisory11 | Nov 30, 2017 | Oct 25, 2017 | |
| Openbsd Openssh | openbsd-openssh-upgrade-7_6 | Nov 17, 2017 | Oct 25, 2017 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-network-ssh-7-7-0-1-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-service-network-ssh-7-7-0-1-11-4-6-0-1-2-0 | Feb 20, 2019 | Oct 25, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-opensshoracle-linux-upgrade-openssh-askpassoracle-linux-upgrade-openssh-cavsoracle-linux-upgrade-openssh-clientsoracle-linux-upgrade-openssh-keycatoracle-linux-upgrade-openssh-ldaporacle-linux-upgrade-openssh-serveroracle-linux-upgrade-openssh-server-sysvinitoracle-linux-upgrade-pam-ssh-agent-auth | Apr 19, 2018 | Oct 3, 2017 |
| Redhat_linux | — | redhat-upgrade-opensshredhat-upgrade-openssh-askpassredhat-upgrade-openssh-cavsredhat-upgrade-openssh-clientsredhat-upgrade-openssh-debuginforedhat-upgrade-openssh-keycatredhat-upgrade-openssh-ldapredhat-upgrade-openssh-serverredhat-upgrade-openssh-server-sysvinitredhat-upgrade-pam_ssh_agent_auth | Apr 11, 2018 | Oct 25, 2017 |
| Suse | — | suse-upgrade-opensshsuse-upgrade-openssh-askpasssuse-upgrade-openssh-askpass-gnomesuse-upgrade-openssh-fipssuse-upgrade-openssh-helperssuse-upgrade-openssh-openssl1suse-upgrade-openssh-openssl1-helpers | Dec 7, 2017 | Oct 25, 2017 |
| Ubuntu | ubuntu-upgrade-openssh-server | Jan 24, 2018 | Oct 25, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub