Alpine/openssh: medium 5.3
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the targ
Action: Upgrade openssh to 7.9_p1-r3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.9_p1-r3 | - |
Fixed versions
| 7.9_p1-r3 |
Sources
- osv: ALPINE-CVE-2018-20685#Alpine:v3.22/openssh
- https://security.alpinelinux.org/vuln/CVE-2018-20685
published · modified · JSON