CVE-2019-6111

🗓️ 31 Jan 2019 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 13742 Views

CVE-2019-6111: OpenSSH 7.9 allows arbitrary file overwrite via scp client

Reporter	Title	Published	Views	Family All 245
0day.today	OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit	20 Jan 201900:00	–	zdt
0day.today	OpenSSH SCP Client - Write Arbitrary Files Exploit	8 Mar 201900:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package openssh version 7.9p1-alt4.p10.1	23 Mar 202200:00	–	altlinux
Tenable Nessus	OpenSSH < 8.0 Multiple Vulnerbilities	21 Aug 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssh (ALAS-2019-1216)	31 May 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssh (ALAS-2023-2202)	14 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssh (ALAS-2019-1313)	31 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssh (ALAS-2023-1794)	14 Aug 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0188: openssh (ALINUX3-SA-2022:0188)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : openssh (CESA-2019:3702)	29 Jan 202100:00	–	nessus

NVD

Node

openbsd opensshRange≤7.9

winscp winscpRange≤5.1.3

Node

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_eusMatch8.1

redhat enterprise_linux_eusMatch8.2

redhat enterprise_linux_eusMatch8.4

redhat enterprise_linux_eusMatch8.6

redhat enterprise_linux_server_ausMatch8.2

redhat enterprise_linux_server_ausMatch8.4

redhat enterprise_linux_server_ausMatch8.6

redhat enterprise_linux_server_tusMatch8.2

redhat enterprise_linux_server_tusMatch8.4

redhat enterprise_linux_server_tusMatch8.6

Node

fedoraproject fedoraMatch30

Node

apache mina_sshdMatch2.2.0

Node

freebsd freebsdRange<12.0

freebsd freebsdMatch12.0-

freebsd freebsdMatch12.0p1

freebsd freebsdMatch12.0p2

freebsd freebsdMatch12.0p3

Node

fujitsu m10-1_firmwareRange<xcp2361

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp2361

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp2361

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp2361

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp2361

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp2361

AND

fujitsu m12-2sMatch-

Node

fujitsu m10-1_firmwareRange<xcp3070

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp3070

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp3070

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp3070

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp3070

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp3070

AND

fujitsu m12-2sMatch-

Node

siemens scalance_x204rna_firmwareRange<3.2.7

AND

siemens scalance_x204rnaMatch-

Node

siemens scalance_x204rna_eec_firmwareRange<3.2.7

AND

siemens scalance_x204rna_eecMatch-

Source	Link
lists	www.lists.apache.org/thread.html/d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3E
exploit-db	www.exploit-db.com/exploits/46193/
openwall	www.openwall.com/lists/oss-security/2019/04/18/1
lists	www.lists.apache.org/thread.html/e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3E
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
access	www.access.redhat.com/errata/RHSA-2019:3702
openwall	www.openwall.com/lists/oss-security/2022/08/02/1
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
security	www.security.netapp.com/advisory/ntap-20190213-0001/
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00030.html

17 Jun 2026 02:38Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25.8

CVSS 3.15.9

EPSS0.58204

SSVC