CVE-2017-15906

5.3

MEDIUMCVSS v3

Published

October 26, 2017

CVSS v2

5 MEDIUM

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

openbsd / openssh

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

< 7.6

oracle / sun_zfs_storage_appliance_kit

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6:*:*:*:*:*:*:*

8.8.6

debian / debian_linux

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

8.0

netapp / cloud_backup

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

All versions

netapp / data_ontap_edge

cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*

All versions

netapp / steelstore_cloud_integrated_storage

More on this CVE

NVD↗GitHub Advisory↗

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

All versions

netapp / clustered_data_ontap

cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*

All versions

netapp / solidfire

cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

All versions

netapp / hci_management_node

cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*

All versions

netapp / active_iq_unified_manager

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

All versions

netapp / oncommand_unified_manager_core_package

cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*

All versions

netapp / virtual_storage_console

cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*

>= 9.7

netapp / vasa_provider_for_clustered_data_ontap

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*

>= 6.0, <= 6.2

netapp / virtual_storage_console

cpe:2.3:a:netapp:virtual_storage_console:9.6:*:*:*:*:vmware_vsphere:*:*

9.6

netapp / vasa_provider_for_clustered_data_ontap

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*

>= 9.7

netapp / storage_replication_adapter_for_clustered_data_ontap

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*

>= 9.7

netapp / storage_replication_adapter_for_clustered_data_ontap

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*

9.6

redhat / enterprise_linux_desktop

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

7.0

redhat / enterprise_linux_workstation

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

7.0

redhat / enterprise_linux_server

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

7.0

redhat / enterprise_linux_server_tus

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

7.6

redhat / enterprise_linux_server_aus

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

7.6

redhat / enterprise_linux_eus

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

7.6

redhat / enterprise_linux_server_aus

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

7.7

redhat / enterprise_linux_server_tus

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

7.7

redhat / enterprise_linux_eus

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

7.7

netapp / cn1610_firmware

cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*

All versions

netapp / cn1610

cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*

All versions

Security Advisories

CVE-2017-15906

Description

More on this CVE