MEDIUM
openssh: Improper write operations in readonly mode allow for zero-length file creation
Published Oct 26, 2017
5.3
MEDIUMCVSS 3.1
EPSS 3.36%
Description
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
Affected products
No data.
Configuration 2
- 8.8.6
Configuration 3
- 8.0
Configuration 4
OR
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- ≥ 9.7
- 9.6
- ≥ 6.0 · ≤ 6.2
- ≥ 9.7
- ≥ 9.7
- 9.6
Configuration 5
AND
- n/a
Configuration 6
OR
- 7.0
- 7.6
- 7.7
- 7.0
- 7.6
- 7.7
- 7.6
- 7.7
- 7.0
No data.
Red Hat Enterprise Linux 7
openssh-0:7.4p1-16.el7
Fixed · RHSA-2018:0980
Red Hat Enterprise Linux 5
openssh
Not affected
Red Hat Enterprise Linux 6
openssh
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | openssh-0:7.4p1-16.el7 | Fixed | RHSA-2018:0980 |
| Red Hat Enterprise Linux 5 | openssh | Not affected | n/a |
| Red Hat Enterprise Linux 6 | openssh | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
5.3 MEDIUM NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact Low
Availability Impact None
4.3 MEDIUM Red Hat
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact Low
Availability Impact None
5.0 MEDIUM NVD
AV:N/AC:L/Au:N/C:N/I:P/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
PartialDecision
n/aAssessed May 28, 2026 · SSVC 2.0.3
3.36% 0.03359
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.03359
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (41 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 3.36% (0.03359) | 88.31th | v5 (v2026.06.15) |
| Jun 15, 2026 | 3.36% (0.03359) | 87.11th | v5 (v2026.06.15) |
| Mar 4, 2026 | 2.66% (0.02659) | 85.52th | v4 (v2025.03.14) |
| Mar 1, 2026 | 1.63% (0.01626) | 81.66th | v4 (v2025.03.14) |
| Feb 4, 2026 | 2.66% (0.02659) | 85.42th | v4 (v2025.03.14) |
| Feb 1, 2026 | 1.63% (0.01626) | 81.56th | v4 (v2025.03.14) |
| Jan 13, 2026 | 2.66% (0.02659) | 85.34th | v4 (v2025.03.14) |
| Jan 1, 2026 | 1.52% (0.01523) | 80.93th | v4 (v2025.03.14) |
| Nov 4, 2025 | 2.76% (0.02761) | 85.49th | v4 (v2025.03.14) |
| Nov 1, 2025 | 1.69% (0.01689) | 81.67th | v4 (v2025.03.14) |
| Oct 4, 2025 | 2.76% (0.02761) | 85.48th | v4 (v2025.03.14) |
| Oct 1, 2025 | 1.69% (0.01689) | 81.63th | v4 (v2025.03.14) |
| Sep 4, 2025 | 3.04% (0.03039) | 86.16th | v4 (v2025.03.14) |
| Sep 1, 2025 | 1.68% (0.01675) | 81.49th | v4 (v2025.03.14) |
| Jul 4, 2025 | 2.76% (0.02761) | 85.41th | v4 (v2025.03.14) |
| Jul 1, 2025 | 1.69% (0.01689) | 81.46th | v4 (v2025.03.14) |
| Jun 4, 2025 | 2.76% (0.02761) | 85.30th | v4 (v2025.03.14) |
| Jun 1, 2025 | 1.69% (0.01689) | 81.38th | v4 (v2025.03.14) |
| May 4, 2025 | 2.76% (0.02761) | 85.22th | v4 (v2025.03.14) |
| May 1, 2025 | 1.69% (0.01689) | 81.27th | v4 (v2025.03.14) |
| Mar 30, 2025 | 2.83% (0.02835) | 84.94th | v4 (v2025.03.14) |
| Mar 29, 2025 | 9.30% (0.09297) | 87.78th | v4 (v2025.03.14) |
| Mar 17, 2025 | 2.76% (0.02761) | 85.05th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.66% (0.00660) | 80.31th | v3 (v2023.03.01) |
| May 3, 2024 | 0.66% (0.00660) | 79.46th | v3 (v2023.03.01) |
| Jan 29, 2024 | 0.66% (0.00660) | 77.43th | v3 (v2023.03.01) |
| Dec 21, 2023 | 0.93% (0.00934) | 81.26th | v3 (v2023.03.01) |
| May 21, 2023 | 0.83% (0.00831) | 79.58th | v3 (v2023.03.01) |
| May 8, 2023 | 1.06% (0.01057) | 81.88th | v3 (v2023.03.01) |
| Apr 27, 2023 | 1.35% (0.01352) | 84.16th | v3 (v2023.03.01) |
| Mar 18, 2023 | 1.17% (0.01167) | 82.77th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.99% (0.00989) | 81.20th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.54% (0.01537) | 74.52th | v2 (v2022.01.01) |
| Dec 14, 2022 | 1.54% (0.01537) | 73.99th | v2 (v2022.01.01) |
| Oct 19, 2022 | 1.18% (0.01183) | 60.79th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.18% (0.01183) | 58.77th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.18% (0.01183) | 35.15th | v2 (v2022.01.01) |
| Feb 3, 2022 | 1.86% (0.01865) | 48.06th | v1 |
| Jan 6, 2022 | 1.86% (0.01865) | 47.54th | v1 |
| Sep 1, 2021 | 1.86% (0.01865) | 76.13th | v1 |
| Apr 14, 2021 | 1.86% (0.01865) | 0.00th | v1 |
References (13)
- http://www.securityfocus.com/bid/101552 vdb-entryThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:0980 vendor-advisoryThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2017-15906 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1506630 Issue Tracking
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html mailing-listMailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2017-15906
- https://security.gentoo.org/glsa/201801-05 vendor-advisoryThird Party Advisory
- https://security.netapp.com/advisory/ntap-20180423-0004/ Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2017-15906
- https://www.openssh.com/txt/release-7.6 Release NotesVendor Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html Third Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/101552 | vdb-entryThird Party AdvisoryVDB Entry | |
| https://access.redhat.com/errata/RHSA-2018:0980 | vendor-advisoryThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2017-15906 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1506630 | Issue Tracking | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf | ||
| https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19 | Third Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html | mailing-listMailing ListThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2017-15906 | ||
| https://security.gentoo.org/glsa/201801-05 | vendor-advisoryThird Party Advisory | |
| https://security.netapp.com/advisory/ntap-20180423-0004/ | Third Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2017-15906 | ||
| https://www.openssh.com/txt/release-7.6 | Release NotesVendor Advisory | |
| https://www.oracle.com/security-alerts/cpujan2020.html | Third Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 26, 2017
Updated May 28, 2026
Reserved Oct 25, 2017
Link CVE-2017-15906
CISA Vulnrichment
Updated May 28, 2026