CVE-2019-6110

🗓️ 31 Jan 2019 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 5644 Views🌐 WEB

OpenSSH 7.9 vulnerability allows server to manipulate client outpu

Reporter	Title	Published	Views	Family All 147
zdt	OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit	20 Jan 201900:00	–	zdt
zdt	OpenSSH SCP Client - Write Arbitrary Files Exploit	8 Mar 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSH affects IBM Watson Studio Local	20 Dec 201913:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by a message spoofing vulnerability (CVE-2019-6110)	8 May 201920:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance affected by an OpenSSH vulnerability (CVE-2019-6110)	2 Aug 201922:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect AIX (CVE-2018-20685 CVE-2018-6109 CVE-2018-6110 CVE-2018-6111)	16 Jul 201915:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	18 Nov 202010:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
Tenable Nessus	OpenSSH < 8.0 Multiple Vulnerbilities	21 Aug 201900:00	–	nessus

NVD

Node

winscp winscpRange≤5.13

Node

Node

AND

Node

AND

Source	Link
cvsweb	www.cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
security	www.security.gentoo.org/glsa/201903-16
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
cvsweb	www.cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
security	www.security.netapp.com/advisory/ntap-20190213-0001/
exploit-db	www.exploit-db.com/exploits/46193/
sintonen	www.sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Parameter	Position	Path	Description	CWE
file	path	localhost:2222	CVE-2019-6110/6111: SCP server/client interaction can reveal additional files and hide transfers using ANSI escape sequences; demonstrates sending exploit.txt alongside the requested file.	CWE-838
file	path	localhost:2222	CVE-2019-6110/6111: Demonstrates manipulation of SCP transfer by sending a malicious exploit.txt and hiding it via ANSI codes; highlights vulnerability in handling stdout/stderr in SCP over SSH.	CWE-838
exploit.txt	path	localhost:2222	CVE-2019-6110/6111: Demonstrates manipulation of SCP transfer by sending a malicious exploit.txt and hiding it via ANSI codes; highlights vulnerability in handling stdout/stderr in SCP over SSH.	CWE-838

17 Jun 2026 02:38Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24

CVSS 3.16.8

EPSS0.20906

SSVC