CVE-2018-20685
Fixed in a distro release EPSS 4%CVSS 5.3
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
Products: openbsd openssh, winscp, netapp cloud_backup, netapp element_software, netapp ontap_select_deploy, netapp steelstore_cloud_integrated_storage, netapp storage_automation_store, debian_linux, canonical ubuntu_linux, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, oracle solaris, fujitsu m10-1_firmware, fujitsu m10-4_firmware, fujitsu m10-4s_firmware, fujitsu m12-1_firmware, fujitsu m12-2_firmware, fujitsu m12-2s_firmware, siemens scalance_x204rna_firmware, siemens scalance_x204rna_eec_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | dropbear | 2019.78-r1 |
| Alpine 3.10 | openssh | 7.9_p1-r3 |
| Alpine 3.11 | dropbear | 2019.78-r1 |
| Alpine 3.11 | openssh | 7.9_p1-r3 |
| Alpine 3.12 | dropbear | 2019.78-r1 |
| Alpine 3.12 | openssh | 7.9_p1-r3 |
| Alpine 3.13 | dropbear | 2020.79-r0 |
| Alpine 3.13 | openssh | 7.9_p1-r3 |
| Alpine 3.14 | dropbear | 2020.79-r0 |
| Alpine 3.14 | openssh | 7.9_p1-r3 |
| Alpine 3.15 | dropbear | 2020.79-r0 |
| Alpine 3.15 | openssh | 7.9_p1-r3 |
| Alpine 3.16 | dropbear | 2020.79-r0 |
| Alpine 3.16 | openssh | 7.9_p1-r3 |
| Alpine 3.17 | dropbear | 2020.79-r0 |
| Alpine 3.17 | openssh | 7.9_p1-r3 |
| Alpine 3.18 | dropbear | 2020.79-r0 |
| Alpine 3.18 | openssh | 7.9_p1-r3 |
| Alpine 3.19 | dropbear | 2020.79-r0 |
| Alpine 3.19 | openssh | 7.9_p1-r3 |
| Alpine 3.20 | dropbear | 2020.79-r0 |
| Alpine 3.20 | openssh | 7.9_p1-r3 |
| Alpine 3.21 | dropbear | 2020.79-r0 |
| Alpine 3.21 | openssh | 7.9_p1-r3 |
| Alpine 3.22 | dropbear | 2020.79-r0 |
| Alpine 3.22 | openssh | 7.9_p1-r3 |
| Alpine 3.23 | dropbear | 2020.79-r0 |
| Alpine 3.23 | openssh | 7.9_p1-r3 |
| Alpine 3.24 | dropbear | 2020.79-r0 |
| Alpine 3.24 | openssh | 7.9_p1-r3 |
| Alpine 3.6 | openssh | 7.5_p1-r4 |
| Alpine 3.7 | openssh | 7.5_p1-r10 |
| Alpine 3.8 | openssh | 7.7_p1-r4 |
| Alpine 3.9 | dropbear | 2018.76-r3 |
| Alpine 3.9 | openssh | 7.9_p1-r3 |
| Amazon Linux 2 | openssh | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-askpass | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-cavs | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-clients | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-keycat | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-ldap | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-server | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | openssh-server-sysvinit | 7.4p1-16.amzn2.0.6 |
| Amazon Linux 2 | pam_ssh_agent_auth | 0.10.3-2.16.amzn2.0.6 |
| Arch Linux | openssh | 8.0p1-1 |
| Debian 12 | openssh | 1:7.9p1-5 |
| Debian 13 | openssh | 1:7.9p1-5 |
| Debian 14 | openssh | 1:7.9p1-5 |
| Debian 8 | openssh | 1:6.7p1-5+deb8u8 |
| Debian 9 | openssh | 1:7.4p1-10+deb9u5 |
| Red Hat Enterprise Linux 8 | openssh | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-askpass | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-askpass-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-cavs | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-cavs-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-clients | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-clients-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-debugsource | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-keycat | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-keycat-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-ldap | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-ldap-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-server | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | openssh-server-debuginfo | 0:8.0p1-3.el8 |
| Red Hat Enterprise Linux 8 | pam_ssh_agent_auth | 0:0.10.3-7.3.el8 |
| Red Hat Enterprise Linux 8 | pam_ssh_agent_auth-debuginfo | 0:0.10.3-7.3.el8 |
| Rocky Linux 8 | openssh | 0:8.0p1-30.el8_10 |
| SUSE Enterprise Storage 4 | openssh | 7.2p2-74.35.1 |
| SUSE Enterprise Storage 4 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | openssh | 7.6p1-9.13.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | openssh-askpass-gnome | 7.6p1-9.13.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | openssh | 7.6p1-9.13.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh | 6.6p1-36.12.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh-askpass-gnome | 6.6p1-36.12.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | openssh | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | openssh-askpass-gnome | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP3 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP3 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP4 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12 SP4 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server 12-LTSS | openssh | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server 12-LTSS | openssh-askpass-gnome | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh | 6.6p1-36.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh-askpass-gnome | 6.6p1-36.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh-askpass-gnome | 6.6p1-54.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openssh | 7.2p2-74.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| SUSE OpenStack Cloud 7 | openssh | 7.2p2-74.35.1 |
| SUSE OpenStack Cloud 7 | openssh-askpass-gnome | 7.2p2-74.35.1 |
| Ubuntu 14.04 LTS | openssh | 1:6.6p1-2ubuntu2.12 |
| Ubuntu 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.7 |
| Ubuntu 18.04 LTS | openssh | 1:7.6p1-4ubuntu0.2 |
| Ubuntu 18.04 LTS | openssh-ssh1 | no fix |
| Ubuntu 20.04 LTS | openssh-ssh1 | no fix |
| Ubuntu 22.04 LTS | openssh-ssh1 | no fix |
| Ubuntu 24.04 LTS | openssh-ssh1 | no fix |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.fips.2.8.1 |
| Ubuntu Pro FIPS 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.fips.2.10.1 |
| openSUSE Leap 15.0 | openssh | 7.6p1-lp150.8.9.1 |
| openSUSE Tumbleweed | openssh | 8.4p1-7.4 |