VulnSocial

CVE-2019-6111(apache / debian_linux)

LOWCVSS 5.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

apache CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • enterprise_linux
  • enterprise_linux_eus
  • enterprise_linux_server_aus

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Affected systems

Vendors
apachecanonicaldebianfedoraprojectfreebsdfujitsuopenbsdredhat
Products
debian_linuxenterprise_linuxenterprise_linux_eusenterprise_linux_server_ausenterprise_linux_server_tusfedorafreebsdm10-1m10-1_firmwarem10-4

15 versions affected across 27 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-11-06: 211-06
Full discourse2 posts
  • Edward Cree@ecree429

    @sedatesnail CVE-2019-6111 was a vuln in `scp` the openssh secure copy pro{gram,tocol} aircraft carriers are coded in US Navy nomenclature as CV (short for 'cruiser, volplane') and have identifiers like "CV-9 USS Essex". baby carriers for ASW are called 'escort carriers' and get coded CVE-.

    1001042
    487 followersView on X
  • Edward Cree@ecree429

    @sedatesnail that time seattle computer products operated an escort carrier must've been particularly disconcerting its hull number was CVE-2019-6111

    1001023
    487 followersView on X
CPE platform detail43 entries

43 of 43 entries

PartVendorProductVersionTarget SWTarget HW
Appapachemina_sshd2.2.0--
OScanonicalubuntu_linux14.04--
OScanonicalubuntu_linux16.04--
OScanonicalubuntu_linux18.04--
OScanonicalubuntu_linux18.10--
OSdebiandebian_linux8.0--
OSdebiandebian_linux9.0--
OSfedoraprojectfedora30--
OSfreebsdfreebsd---
OSfreebsdfreebsd12.0--
OSfreebsdfreebsd12.0--
OSfreebsdfreebsd12.0--
OSfreebsdfreebsd12.0--
HWfujitsum10-1---
OSfujitsum10-1_firmware---
HWfujitsum10-4---
OSfujitsum10-4_firmware---
HWfujitsum10-4s---
OSfujitsum10-4s_firmware---
HWfujitsum12-1---
OSfujitsum12-1_firmware---
HWfujitsum12-2---
OSfujitsum12-2_firmware---
HWfujitsum12-2s---
OSfujitsum12-2s_firmware---
Appopenbsdopenssh---
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux_eus8.1--
OSredhatenterprise_linux_eus8.2--
OSredhatenterprise_linux_eus8.4--
OSredhatenterprise_linux_eus8.6--
OSredhatenterprise_linux_server_aus8.2--
OSredhatenterprise_linux_server_aus8.4--
OSredhatenterprise_linux_server_aus8.6--
OSredhatenterprise_linux_server_tus8.2--
OSredhatenterprise_linux_server_tus8.4--
OSredhatenterprise_linux_server_tus8.6--
HWsiemensscalance_x204rna---
HWsiemensscalance_x204rna_eec---
OSsiemensscalance_x204rna_eec_firmware---
OSsiemensscalance_x204rna_firmware---
Appwinscpwinscp---

Explore more

Back to dashboardapache CVEscanonical CVEsdebian CVEsdebian_linux vulnerabilities