Skip to content

01 Record index

02 Records

01 Record

CVE-2017-15906

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

MediumPUBLISHEDCNA: mitre

CNA base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

02 Description

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

3.36% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 87.6% of scored records. A rank, not a probability.

NVD base score

5.3 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2017-10-26 00:00Z8 YR AGO

Last updated

2026-05-28 17:56Z3 MO AGO

Reserved

2017-10-25

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE-732Incorrect Permission Assignment for Critical ResourceClass
CWE-20Improper Input ValidationClass

Data version

5.2

Document digest

a19bdd534b89a975a32b3863759b1e58324b3523ed58135b55b9729995019a1d

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

netappactive_iq_unified_managerNot specified—

netappcloud_backupNot specified—

netappclustered_data_ontapNot specified—

netappcn1610Not specified—

netappcn1610_firmwareNot specified—

netappdata_ontap_edgeNot specified—

netapphci_management_nodeNot specified—

netapponcommand_unified_manager_core_packageNot specified—

netappsolidfireNot specified—

netappsteelstore_cloud_integrated_storageNot specified—

netappstorage_replication_adapter_for_clustered_data_ontapNot specified—

netappvasa_provider_for_clustered_data_ontapNot specified—

netappvirtual_storage_consoleNot specified—

openbsdopensshNot specified—

oraclesun_zfs_storage_appliance_kitNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_server_ausNot specified—

redhatenterprise_linux_server_tusNot specified—

redhatenterprise_linux_workstationNot specified—

06 References

www.openssh.comhttps://www.openssh.com/txt/release-7.6
www.securityfocus.com101552http://www.securityfocus.com/bid/101552vdb-entry
github.comhttps://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19
security.gentoo.orgGLSA-201801-05https://security.gentoo.org/glsa/201801-05vendor-advisory
security.netapp.comhttps://security.netapp.com/advisory/ntap-20180423-0004/
access.redhat.comRHSA-2018:0980https://access.redhat.com/errata/RHSA-2018:0980vendor-advisory
lists.debian.org[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security updatehttps://lists.debian.org/debian-lts-announce/2018/09/msg00010.htmlmailing-list
www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2020.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf