Published: 17/03/2023 Updated: 12/02/2024

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

ssh-add in OpenSSH prior to 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openbsd openssh
netapp solidfire element os -
netapp hci bootstrap os -
netapp brocade fabric operating system -

Debian Bug report logs - #1033166 openssh: CVE-2023-28531 Package: src:openssh; Maintainer for src:openssh is Debian OpenSSH Maintainers <debian-ssh@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 18 Mar 2023 19:57:02 UTC Severity: important Tags: security, upstream Found in versi ...

Several vulnerabilities have been discovered in OpenSSH, an implementation of the SSH protocol suite CVE-2021-41617 It was discovered that sshd failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandU ...

Description This CVE is under investigation by Red Hat Product Security ...

PAN-SA-2024-0003 Informational Bulletin: Impact of OSS CVEs in Prisma SD-WAN ION ...

Critical Infrastructure Sectors: Critical Manufacturing

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

GPT_Vuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use customtkinter and tkinter for the GUI version of the code This project also has a

openssh-server-gael This is NOT an original piece of work, just a snap of OpenSSH server The SSH2 protocol implemented in OpenSSH is standardized by the IETF secsh working group and is specified in several RFCs and drafts The overall structure of SSH2 is described in the architecture RFC Installation sudo snap install openssh-server-gael_89_amd64snap --devmode First use R

GPT_Vuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use customtkinter and tkinter for the GUI version of the code This project also has a

NVD-CWE-noinfo https://www.openwall.com/lists/oss-security/2023/03/15/8 https://security.netapp.com/advisory/ntap-20230413-0008/https://security.gentoo.org/glsa/202307-01 https://www.debian.org/security/2023/dsa-5586 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033166 https://nvd.nist.gov https://github.com/morpheuslord/GPT_Vuln-analyzer https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10 https://www.debian.org/security/2023/dsa-5586

CVE-2023-28531

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect