CVE
CVE-2019-6110
CVE ID |
CVE-2019-6110
|
---|---|
CVSS Score |
6.8
|
Operating System | |
Affected Versions |
CentOS 7
|
Patched Versions |
7.4p1-23_ol002.el7
|
Patch Date |
|
Additional Information
NVD Listing: https://nvd.nist.gov/vuln/detail/CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.