Published: 18/12/2023 Updated: 13/03/2024

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

In ssh-agent in OpenSSH prior to 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openbsd openssh

Several vulnerabilities have been discovered in OpenSSH, an implementation of the SSH protocol suite CVE-2021-41617 It was discovered that sshd failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandU ...

DescriptionA flaw was found in OpenSSH When specifying destination constraints while adding PKCS#11-hosted private keys, the constraints only apply to the first key even in cases where the token returns multiple keysA flaw was found in OpenSSH When specifying destination constraints while adding PKCS#11-hosted private keys, the constraint ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...

PAN-SA-2024-0003 Informational Bulletin: Impact of OSS CVEs in Prisma SD-WAN ION ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-03-07-2024-2 macOS Sonoma 144   From: Apple Product Sec ...

openssh-server-gael This is NOT an original piece of work, just a snap of OpenSSH server The SSH2 protocol implemented in OpenSSH is standardized by the IETF secsh working group and is specified in several RFCs and drafts The overall structure of SSH2 is described in the architecture RFC Installation sudo snap install openssh-server-gael_89_amd64snap --devmode First use R

NVD-CWE-noinfo https://www.openssh.com/txt/release-9.6 https://www.openwall.com/lists/oss-security/2023/12/18/2 https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754b https://www.debian.org/security/2023/dsa-5586 https://security.netapp.com/advisory/ntap-20240105-0005/https://support.apple.com/kb/HT214084 http://seclists.org/fulldisclosure/2024/Mar/21 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5586

CVE-2023-51384

Vulnerability Summary

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect