Skip to content
OpenAdvisories
Medium DLA-611-1 1 CVE

jsch - security update

Published Sep 5, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 jsch 0.1.42-2+deb7u1

Vulnerabilities 1

  • Medium 5.9
    CVE-2016-5725 Public exploit EPSS 24%

    Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

    jsch com.jcraft:jsch Debian Maven