Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-6111

67
FAUCET Score

CVE-2019-6111 describes a vulnerability in OpenSSH 7.9's scp client, stemming from its legacy rcp implementation, which allows a malicious scp server or Man-in-The-Middle attacker to overwrite arbitrary files in the client's target directory, including sensitive files like .ssh/authorized_keys during recursive operations. This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high integrity impact, but requires high attack complexity. While not currently in CISA's KEV catalog or actively exploited, public exploit code exists on ExploitDB, though community discussion and media coverage are minimal.

Impacted Technologies

VendorProductVersion(s)CPE
<= 7.9CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*
<= 5.1.3CPE matchmatch criteria
cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
18.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.9MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
2.2
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
58.20%
Probability of exploitation in next 30 days
EPSS Percentile
99.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
ExploitDB: EDB-46193 · Jan 18, 2019
This CVE's current EPSS score of 0.5820 is in the 99th percentile among its peer group of 19,955 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: openssh-0:8.0p1-3.el8
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssh

Vendor Advisories (1)

redhatCVE-2019-6111Moderate

openssh: Improper validation of object names allows malicious server to overwrite files via scp client

Nov 16, 2018

References

lists.opensuse.org / opensuse-security-announce/2019-06/msg00058.html
Broken Link
access.redhat.com / errata/RHSA-2019:3702
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
ExploitIssue TrackingThird Party Advisory
cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf
Third Party Advisory
cvsweb.openbsd.org / src/usr.bin/ssh/scp.c
Release Notes
lists.apache.org / thread.html/c45d9bc90700354b58fb7455962873c44229841880dcb64842fa7d23%40%3Cdev.mina.apache.org%3E
lists.apache.org / thread.html/c7301cab36a86825359e1b725fc40304d1df56dc6d107c1fe885148b%40%3Cdev.mina.apache.org%3E
lists.apache.org / thread.html/d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3E
lists.apache.org / thread.html/e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3E
lists.debian.org / debian-lts-announce/2019/03/msg00030.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G
security.gentoo.org / glsa/201903-16
Third Party Advisory
security.netapp.com / advisory/ntap-20190213-0001
Third Party Advisory
sintonen.fi / advisories/scp-client-multiple-vulnerabilities.txt
Third Party Advisory
usn.ubuntu.com / 3885-1
Third Party Advisory
usn.ubuntu.com / 3885-2
Third Party Advisory
debian.org / security/2019/dsa-4387
Third Party Advisory
exploit-db.com / exploits/46193
ExploitThird Party AdvisoryVDB Entry
freebsd.org / security/advisories/FreeBSD-EN-19:10.scp.asc
Third Party Advisory
oracle.com / technetwork/security-advisory/cpuoct2019-5072832.html
PatchThird Party Advisory
openwall.com / lists/oss-security/2019/04/18/1
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2022/08/02/1
Mailing ListThird Party Advisory
securityfocus.com / bid/106741
Broken LinkThird Party AdvisoryVDB Entry