Alpine/dropbear: medium 5.3
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the targ
Action: Upgrade dropbear to 2019.78-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2019.78-r1 | - |
Fixed versions
| 2019.78-r1 |
Sources
- osv: ALPINE-CVE-2018-20685#Alpine:v3.11/dropbear
- https://security.alpinelinux.org/vuln/CVE-2018-20685
published · modified · JSON