CVE-2019-6111

CVE-2019-6111 is a medium-severity vulnerability in Openbsd Openssh with a CVSS 3.x base score of 5.9. Its EPSS exploit-prediction score of 58% places it in the 99th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-22.

Key facts

Description

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

Frequently asked questions

What is CVE-2019-6111?
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
How severe is CVE-2019-6111?
CVE-2019-6111 has a CVSS 3.x base score of 5.9, rated medium severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2019-6111 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 58% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-6111?
CVE-2019-6111 primarily affects Openbsd Openssh. In total, 35 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2019-6111?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2019-6111 published?
CVE-2019-6111 was published on 2019-01-31 and last updated on 2026-06-17.

References

Affected products (35)

More vulnerabilities in Openbsd Openssh

All CVEs affecting Openbsd Openssh →

Other CWE-22 (Path Traversal) vulnerabilities

Browse all CWE-22 (Path Traversal) vulnerabilities →

Threat intelligence

Threat-intel indicators referencing this CVE: