GHSA-543w-q592-87ph

GHSA-543w-q592-87ph PUBLISHED CVSS 5.300000190734863 MEDIUM

Record from GitHub Advisory Database · Published May 13, 2022

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

Risk scores

CVSS 3.0

5.300000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Timeline

Jan 2, 2019 PoC Published
May 13, 2022 CVE Published
Apr 29, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-543w-q592-87ph
vulnetix vdb fixes GHSA-543w-q592-87ph

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-543w-q592-87ph/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://access.redhat.com/errata/RHSA-2018:0980 url
https://www.oracle.com/security-alerts/cpujan2020.html url
http://www.securityfocus.com/bid/101552 url
https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19 url
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf url
https://security.netapp.com/advisory/ntap-20180423-0004 url
https://nvd.nist.gov/vuln/detail/CVE-2017-15906 advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html url
https://security.gentoo.org/glsa/201801-05 url
https://www.openssh.com/txt/release-7.6 url

Look up in the Resolve Platform →