Lucene search

K
cvelistMitreCVELIST:CVE-2017-15906
HistoryOct 26, 2017 - 12:00 a.m.

CVE-2017-15906

2017-10-2600:00:00
mitre
www.cve.org

5.5 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.7%

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.