CVE-2017-15906
Medium
Description
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Openbsd Openssh
PublishedOct 26, 2017
First seenOct 26, 2017
Weakness typeCWE-732CWE-732
How to fix
Update
- openbsd openssh7.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd openssh | v < 7.6 | 7.6 |
| oracle sun_zfs_storage_appliance_kit | 8.8.6 | — |
| debian debian_linux | 8.0 | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp cloud_backup | No range specified | — |
| netapp clustered_data_ontap | No range specified | — |
| netapp data_ontap_edge | No range specified | — |
| netapp hci_management_node | No range specified | — |
| netapp oncommand_unified_manager_core_package | No range specified | — |
| netapp solidfire | No range specified | — |
| netapp steelstore_cloud_integrated_storage | No range specified | — |
| netapp storage_replication_adapter_for_clustered_data_ontap | 9.7 ≤ v, 9.6 | — |
| netapp vasa_provider_for_clustered_data_ontap | 6.0 ≤ v ≤ 6.2, 9.7 ≤ v | — |
| netapp virtual_storage_console | 9.7 ≤ v, 9.6 | — |
| netapp cn1610_firmware | No range specified | — |
| redhat enterprise_linux_desktop | 7.0 | — |
| redhat enterprise_linux_eus | 7.6, 7.7 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_server_aus | 7.6, 7.7 | — |
| redhat enterprise_linux_server_tus | 7.6, 7.7 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.