Wind River Support Network

HomeDefectsLIN1018-3412

Fixed

LIN1018-3412 : Security Advisory - openssh - CVE-2018-20685

Created: Jan 15, 2019 Updated: Feb 19, 2019

Resolved Date: Jan 28, 2019

Found In Version: unknown

Fix Version: 10.18.44.4

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename.

https://nvd.nist.gov/vuln/detail/CVE-2018-20685

CVEs

CVE-2018-20685