30
50
35
30
35
30
45
35
30
USN-8514-2: OpenSSH vulnerability
Ubuntu backports an OpenSSH fix to older LTS releases for an scp flaw enabling setuid file placement and privilege escalation.
USN-8514-2 extends the USN-8514-1 OpenSSH fix to Ubuntu 14.04 LTS, 18.04 LTS, and 20.04 LTS. The flaw stems from incorrect file permission handling when downloading files as root using the legacy scp protocol without the preserve-mode option. An attacker could exploit this to install setuid or setgid files on the system, potentially leading to privilege escalation.
35
30
30
30
35
30
35
30
35
30
30
35
30
30
35
30
30
35
35
30
30
30
30
30
30
30
30
35
30
50
35