Sploitus

CVE-2019-6110

8 known exploits for CVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

Affected products
Alt Linux, Debian, Ibm Aix, Openssh, Suse
Openbsd Openssh
≤ 7.9
Winscp
≤ 5.13
Fix
Available
CVSS 3.1
6.8 MEDIUM
EPSS
20.9% (97th percentile)
Weakness
CWE-838
NVD status
Modified
Published
2019-01-31
CVE-2019-6110 at NVD
Authoritative description, scoring and affected products

8 known exploits for CVE-2019-6110

Proof-of-concept code and exploit modules indexed by Sploitus

MAL-008
2026-08-25 KitPloitKITPLOIT
OpenSSH SCP Client - Write Arbitrary Files Exploit
2019-03-08 Harry SintonenZDT
OpenSSH 7.6p1 SCP Client - Multiple Vulnerabilities (SSHtranger Things) Exploit
2019-01-20 Mark E. HaaseZDT
SSHtranger Things SCP Client File Issue
2019-01-18 Mark E. HaasePACKETSTORM
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 Mark E. HaaseEXPLOITPACK
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 Mark E. HaaseEXPLOITDB
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 Harry SintonenEXPLOITPACK
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 Harry SintonenEXPLOITDB