REDHAT-BUG-2454469: High severity OpenSSH OpenSSH vulnerability
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
When using scp as root with -O (legacy scp protocol), include -p (do not omit preserve mode) to avoid downloaded files being installed with setuid/setgid permissions.
OpenSSH scp (legacy scp protocol) scp options = Use -O and add -p (preserve mode) when copying as root
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2454469?
The severity of REDHAT-BUG-2454469 is rated as high, with a score of 7.
What is the risk associated with REDHAT-BUG-2454469?
The risk associated with REDHAT-BUG-2454469 is categorized as risk level 33.
How do I fix REDHAT-BUG-2454469?
To fix REDHAT-BUG-2454469, ensure to use OpenSSH version 10.3 or later and avoid using the -O option with legacy scp protocol.
What is the impact of REDHAT-BUG-2454469?
The impact of REDHAT-BUG-2454469 is that a file downloaded by scp may be setuid or setgid when downloaded as root without preserving file modes.
Which version of OpenSSH is affected by REDHAT-BUG-2454469?
OpenSSH versions prior to 10.3 are affected by REDHAT-BUG-2454469.