CVE-2017-15906

Name
CVE-2017-15906
Description
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Third Party Advisory http://www.securityfocus.com/bid/101552
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0980
cve@mitre.org https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
Third Party Advisory https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19
Mailing List https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
Third Party Advisory https://security.gentoo.org/glsa/201801-05
Third Party Advisory https://security.netapp.com/advisory/ntap-20180423-0004/
Release Notes https://www.openssh.com/txt/release-7.6
Third Party Advisory https://www.oracle.com/security-alerts/cpujan2020.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* openssh >= None < 7.6

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openssh edge-main 7.5_p1-r8 None fixed
openssh edge-main 7.4_p1-r0 None possibly vulnerable
openssh 3.22-main 7.5_p1-r8 None fixed
openssh 3.22-main 7.4_p1-r0 None possibly vulnerable
openssh 3.21-main 7.5_p1-r8 None fixed
openssh 3.21-main 7.4_p1-r0 None possibly vulnerable
openssh 3.20-main 7.5_p1-r8 None fixed
openssh 3.20-main 7.4_p1-r0 None possibly vulnerable
openssh 3.19-main 7.5_p1-r8 None fixed
openssh 3.19-main 7.4_p1-r0 None possibly vulnerable
openssh 3.18-main 7.5_p1-r8 None fixed
openssh 3.17-main 7.5_p1-r8 None fixed
openssh 3.12-main 7.5_p1-r8 None fixed
openssh 3.11-main 7.5_p1-r8 None fixed
openssh 3.10-main 7.5_p1-r8 None fixed