CVE-2017-15906
openssh-sftp-server: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readon...
CVE-2017-15906 is fixed in 5 products on 1 platform, first by openssh-client 1:7.6p1-4, released October 24, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0336
88th percentile
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| openssh-client · Ubuntu 18.04.6 LTS (bionic) | 1:7.6p1-4 | openssh-client 1:7.6p1-4 | Oct 24, 2017 |
| openssh-server · Ubuntu 18.04.6 LTS (bionic) | 1:7.6p1-4 | openssh-server 1:7.6p1-4 | Oct 24, 2017 |
| openssh-sftp-server · Ubuntu 18.04.6 LTS (bionic) | 1:7.6p1-4 | openssh-sftp-server 1:7.6p1-4 | Oct 24, 2017 |
| ssh · Ubuntu 18.04.6 LTS (bionic) | 1:7.6p1-4 | ssh 1:7.6p1-4 | Oct 24, 2017 |
| ssh-askpass-gnome · Ubuntu 18.04.6 LTS (bionic) | 1:7.6p1-4 | ssh-askpass-gnome 1:7.6p1-4 | Oct 24, 2017 |