AZL-108432
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108432.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108432
- Upstream
- CVE-2026-110923
- Published
- 2026-10-15T06:17:01Z
- Modified
- 2026-10-19T05:35:54Z
- Summary
- CVE-2026-110923 affecting package openssh 9.8p1-10
- Details
-
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected.
- References