| Package | Affected versions | Patched versions |
|---|---|---|
| storage replication adapter for clustered data ontap | = 9.6≥ 9.7 | |
| vasa provider for clustered data ontap | ≥ 6.0, ≤ 6.2≥ 9.7 | |
| virtual storage console | = 9.6≥ 9.7 | |
| openssh | < 7.6 | 7.6 |
| sun zfs storage appliance kit | = 8.8.6 |
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free