CVE-2019-6110

🗓️ 31 Jan 2019 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 5595 Views🌐 WEB

OpenSSH 7.9 vulnerability allows server to manipulate client outpu

Reporter	Title	Published	Views	Family All 147
zdt	OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit	20 Jan 201900:00	–	zdt
zdt	OpenSSH SCP Client - Write Arbitrary Files Exploit	8 Mar 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSH affects IBM Watson Studio Local	20 Dec 201913:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by a message spoofing vulnerability (CVE-2019-6110)	8 May 201920:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance affected by an OpenSSH vulnerability (CVE-2019-6110)	2 Aug 201922:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect AIX (CVE-2018-20685 CVE-2018-6109 CVE-2018-6110 CVE-2018-6111)	16 Jul 201915:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	18 Nov 202010:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
Tenable Nessus	OpenSSH < 8.0 Multiple Vulnerbilities	21 Aug 201900:00	–	nessus

NVD

Node

winscp winscpRange≤5.13

Node

Node

AND

Node

AND

Source	Link
cvsweb	www.cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
security	www.security.gentoo.org/glsa/201903-16
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
cvsweb	www.cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
security	www.security.netapp.com/advisory/ntap-20190213-0001/
exploit-db	www.exploit-db.com/exploits/46193/
sintonen	www.sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Parameter	Position	Path	Description	CWE
test.txt	path	localhost:2222/test.txt	SCP/N SSH exploit described sends a malicious file (exploit.txt) after the requested file and uses ANSI sequences to hide the second transfer. The vulnerability relates to SCP client handling of server stderr output and crafted transfers.	CWE-838
exploit.txt	path	localhost:2222/exploit.txt	Malicious file transmitted as part of the exploit sequence to trigger hidden transfer and ANSI concealment in the SCP client.	CWE-838

17 Jun 2026 02:38Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24

CVSS 3.16.8

EPSS0.20906

SSVC