CVE-2019-6109

Published: Jan 31, 2019Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 1.6 / Impact: 5.2

Source: NVD

Description

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

Affected (37)

Products: Openbsd: Openssh · Winscp: Winscp · Canonical: Ubuntu Linux · +6 more

Show all products

1 product

1 product

1 product

1 product

3 products

Storage Automation Store

1 product

4 products

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Siemens

2 products

Scalance X204rna Firmware

Scalance X204rna Eec Firmware

6 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Up to 7.9
Winscp Winscp	Up to 5.13

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Element Software	All versions
Netapp Ontap Select Deploy	All versions
Netapp Storage Automation Store	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 30

Configuration F

11 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Eus	Version 8.1
Redhat Enterprise Linux Eus	Version 8.2
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux Eus	Version 8.6
Redhat Enterprise Linux Server Aus	Version 8.2
Redhat Enterprise Linux Server Aus	Version 8.4
Redhat Enterprise Linux Server Aus	Version 8.6
Redhat Enterprise Linux Server Tus	Version 8.2
Redhat Enterprise Linux Server Tus	Version 8.4
Redhat Enterprise Linux Server Tus	Version 8.6

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204rna Firmware	Before 3.2.7

Running on/with	Platform Versions
Siemens Scalance X204rna	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204rna Eec Firmware	Before 3.2.7

Running on/with	Platform Versions
Siemens Scalance X204rna Eec	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M10 1 Firmware	Before xcp2361

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M10 4 Firmware	Before xcp2361

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M10 4s Firmware	Before xcp2361

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M12 1 Firmware	Before xcp2361

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M12 2 Firmware	Before xcp2361

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Fujitsu M12 2s Firmware	Before xcp2361

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M10 1 Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M10 1	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M10 4 Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M10 4	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M10 4s Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M10 4s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M12 1 Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M12 1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M12 2 Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M12 2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu M12 2s Firmware	Before xcp3070

Running on/with	Platform Versions
Fujitsu M12 2s	All versions

Related CWEs

CWE-116

Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

References (26)

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html

Source: cve@mitre.org

Broken Link

https://access.redhat.com/errata/RHSA-2019:3702

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c

Source: cve@mitre.org

Release NotesVendor Advisory

https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c

Source: cve@mitre.org

Release NotesVendor Advisory

https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/

Source: cve@mitre.org

https://security.gentoo.org/glsa/201903-16

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190213-0001/

Source: cve@mitre.org

Third Party Advisory

https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3885-1/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4387

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Source: cve@mitre.org

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html