REDHAT-BUG-2436979: Medium severity OpenSSH OpenSSH vulnerability
A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.
This is the same issue as in OpenSSH, tracked as CVE-2019-6111.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2436979?
The severity of REDHAT-BUG-2436979 is considered high due to the potential for unauthorized file access and execution.
How do I fix REDHAT-BUG-2436979?
To fix REDHAT-BUG-2436979, update to the latest version of OpenSSH that addresses the vulnerability.
What software is affected by REDHAT-BUG-2436979?
REDHAT-BUG-2436979 affects the OpenSSH client, specifically versions without the necessary security patches.
What are the potential consequences of REDHAT-BUG-2436979?
The potential consequences of REDHAT-BUG-2436979 include the ability for attackers to override local files and potentially execute malicious code.
How can I identify if I am vulnerable to REDHAT-BUG-2436979?
You can identify if you are vulnerable to REDHAT-BUG-2436979 by checking if you are using an affected version of OpenSSH and have not applied the necessary updates.