CVE-2019-6111

🗓️ 31 Jan 2019 18:29:00Reported by [email protected]Type

An issue was discovered in OpenSSH 7.9. The scp implementation allows a malicious server to overwrite arbitrary files in the client's target directory

Reporter	Title	Published	Views	Family All 246
0day.today	OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit	20 Jan 201900:00	–	zdt
0day.today	OpenSSH SCP Client - Write Arbitrary Files Exploit	8 Mar 201900:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package openssh version 7.9p1-alt4.p10.1	23 Mar 202200:00	–	altlinux
Tenable Nessus	OpenSSH < 8.0 Multiple Vulnerbilities	21 Aug 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssh (ALAS-2019-1216)	31 May 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssh (ALAS-2023-2202)	14 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssh (ALAS-2019-1313)	31 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssh (ALAS-2023-1794)	14 Aug 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0188: openssh (ALINUX3-SA-2022:0188)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : openssh (CESA-2019:3702)	29 Jan 202100:00	–	nessus

NVD

Node

openbsd opensshRange≤7.9

winscp winscpRange≤5.1.3

Node

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_eusMatch8.1

redhat enterprise_linux_eusMatch8.2

redhat enterprise_linux_eusMatch8.4

redhat enterprise_linux_eusMatch8.6

redhat enterprise_linux_server_ausMatch8.2

redhat enterprise_linux_server_ausMatch8.4

redhat enterprise_linux_server_ausMatch8.6

redhat enterprise_linux_server_tusMatch8.2

redhat enterprise_linux_server_tusMatch8.4

redhat enterprise_linux_server_tusMatch8.6

Node

fedoraproject fedoraMatch30

Node

apache mina_sshdMatch2.2.0

Node

freebsd freebsdRange<12.0

freebsd freebsdMatch12.0-

freebsd freebsdMatch12.0p1

freebsd freebsdMatch12.0p2

freebsd freebsdMatch12.0p3

Node

fujitsu m10-1_firmwareRange<xcp2361

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp2361

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp2361

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp2361

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp2361

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp2361

AND

fujitsu m12-2sMatch-

Node

fujitsu m10-1_firmwareRange<xcp3070

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp3070

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp3070

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp3070

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp3070

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp3070

AND

fujitsu m12-2sMatch-

Node

siemens scalance_x204rna_firmwareRange<3.2.7

AND

siemens scalance_x204rnaMatch-

Node

siemens scalance_x204rna_eec_firmwareRange<3.2.7

AND

siemens scalance_x204rna_eecMatch-

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
access	www.access.redhat.com/errata/RHSA-2019:3702
cvsweb	www.cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
sintonen	www.sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
security	www.security.netapp.com/advisory/ntap-20190213-0001/
usn	www.usn.ubuntu.com/3885-2/
securityfocus	www.securityfocus.com/bid/106741
debian	www.debian.org/security/2019/dsa-4387
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
usn	www.usn.ubuntu.com/3885-1/

18 Dec 2025 15:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25.8

CVSS 3.15.9

EPSS0.58204

CWE-22