CVE-2017-15906: Medium severity OpenBSD OpenSSH vulnerability
Last updated 25 August 2025
Other sources
The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/opensshto a version that resolves this vulnerability.Fixed in 7.6 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:8.4p1-5+deb11u3Fixed in 1:8.4p1-5+deb11u7Fixed in 1:9.2p1-2+deb12u10Fixed in 1:9.2p1-2+deb12u9Fixed in 1:10.0p1-7+deb13u4Fixed in 1:10.0p1-7+deb13u2Fixed in 1:10.3p1-4 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:8.4p1-5+deb11u3 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:8.4p1-5+deb11u7 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:9.2p1-2+deb12u10 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:9.2p1-2+deb12u9 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:10.0p1-7+deb13u4 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:10.0p1-7+deb13u2 - Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:10.3p1-4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch a6981567e8e215acc1ef690c8dbb30f2d9b00a19
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15906?
CVE-2017-15906 has a medium severity rating, as it allows attackers to create zero-length files in readonly mode.
How do I fix CVE-2017-15906?
To fix CVE-2017-15906, upgrade OpenSSH to version 7.6 or later.
What versions of OpenSSH are affected by CVE-2017-15906?
OpenSSH versions before 7.6 are affected by CVE-2017-15906.
Can CVE-2017-15906 impact file integrity?
Yes, CVE-2017-15906 can impact file integrity by allowing creation of zero-length files in readonly mode.
Is there a specific way to mitigate CVE-2017-15906?
Mitigation of CVE-2017-15906 involves ensuring your OpenSSH installation is updated to version 7.6 or later.