PT-2016-3068 · Openssh+7 · Openssh+7
Jann Horn
·
Publicado
2016-11-24
·
Atualizado
2026-03-10
·
CVE-2016-10009
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 7.4
OpenSSH versions prior to 9.3p2
Description
The issue is related to an untrusted search path vulnerability in the ssh-agent component of OpenSSH, which can be exploited by remote attackers to execute arbitrary local PKCS#11 modules. This can be achieved by leveraging control over a forwarded agent-socket. The vulnerability allows for remote code execution.
Recommendations
For OpenSSH versions prior to 7.4, update to version 7.4 or later to resolve the issue.
For OpenSSH versions prior to 9.3p2, update to version 9.3p2 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
ssh-agent component until a patch is available.Exploit
Correção
RCE
Untrusted Search Path
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Freebsd
Ibm Aix
Openssh
Red Hat
Suse
Ubuntu