CVE-2017-15906

Опубликовано: 26 окт. 2017

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

Ссылки

http://www.securityfocus.com/bid/101552
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0980
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201801-05
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180423-0004/
Third Party Advisory
https://www.openssh.com/txt/release-7.6
Release Notes
Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2020.html
Third Party Advisory
http://www.securityfocus.com/bid/101552
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0980
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201801-05
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180423-0004/
Third Party Advisory
https://www.openssh.com/txt/release-7.6
Release Notes
Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2020.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 7.6 (исключая)

Конфигурация 2

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*

Версия от 9.7 (включая)

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.2 (включая)

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*

Версия от 9.7 (включая)

cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*

Версия от 9.7 (включая)

cpe:2.3:a:netapp:virtual_storage_console:9.6:*:*:*:*:vmware_vsphere:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02761

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVE-2017-15906

CVSS3: 5.3

ubuntu

около 8 лет назад

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

CVE-2017-15906

CVSS3: 4.3

redhat

около 8 лет назад

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

CVE-2017-15906

CVSS3: 5.3

debian

около 8 лет назад

The process_open function in sftp-server.c in OpenSSH before 7.6 does ...

GHSA-543w-q592-87ph

CVSS3: 5.3

github

больше 3 лет назад

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

ELSA-2018-0980

oracle-oval

больше 7 лет назад

ELSA-2018-0980: openssh security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 86%

0.02761

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-732