CVE-2018-20685: canonical ubuntu_linux Incorrect Authorization
CVSS: 5.3v3.1MediumModified
AliasesALPINE-CVE-2018-20685MGASA-2019-0067UBUNTU-CVE-2018-20685DEBIAN-CVE-2018-20685
Published 10-01-2019Last modified 17-12-2025
Vulnerability summary
CVE-2018-20685 is a medium (CVSS 5.3) Incorrect Authorization vulnerability in canonical ubuntu_linux. EPSS estimates a 3.68% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities.
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)EPSS score
3.68%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 11 · Related 8Timeline
- 10-01-2019PublishedVulnerability first disclosed.
- 17-12-2025Last modifiedVulnerability information updated.
Description
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
CVSS metrics
7 scores · 5 sources · 3 versionsMedium 5.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:NSourcesAll 5 agree
- NVDNIST5.3MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- OSV · AlpineEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Medium 5.3Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:NSourcesSingle source
Low 2.6Preferred score · NVD (NIST)
AV:N/AC:H/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
3.68%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.68% on 18-09-2026
18-09-202618-10-2026
EPSS score3.68%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Fujitsu6 products
- m10-1_firmware< xcp2361 | < xcp3070
- m10-4_firmware< xcp2361 | < xcp3070
- m10-4s_firmware< xcp2361 | < xcp3070
- m12-1_firmware< xcp2361 | < xcp3070
- m12-2_firmware< xcp2361 | < xcp3070
Netapp5 products
Redhat4 products
- enterprise_linuxEOL7.0 | 8.0
- enterprise_linux_eus8.1 | 8.2 | 8.4 | 8.6
- enterprise_linux_server_aus8.2 | 8.4 | 8.6
- enterprise_linux_server_tus8.2 | 8.4 | 8.6
Alpine2 products
- dropbear< 2019.78-r1 | < 2020.79-r0 | < 2018.76-r3
- openssh< 7.9_p1-r3 | < 7.5_p1-r4 | < 7.5_p1-r10 | < 7.7_p1-r4
Debian2 products
- openssh< 1:7.9p1-5
- debian_linuxEOL8.0 | 9.0
Siemens2 products
- scalance_x204rna_firmware< 3.2.7
- scalance_x204rna_eec_firmware< 3.2.7
Ubuntu2 products
- openssh< 1:6.6p1-2ubuntu2.12 | < 1:7.2p2-4ubuntu2.7 | < 1:7.2p2-4ubuntu2.fips.2.8.1 | < 1:7.2p2-4ubuntu2.fips.2.10.1 | < 1:7.6p1-4ubuntu0.2
- openssh-ssh1All versions (No fix recorded)
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 18.10
Mageia1 product
- openssh< 7.5p1-2.3.mga6
Openbsd1 product
- openssh≤ 7.9
Oracle1 product
- solarisEOL10
Winscp1 product
- winscp≤ 5.13
12 vendors · 28 products
References
23 links
- security.netapp.com/advisory/ntap-20190215-0001/Third Party Advisory