PT-2023-7885 · Openssh+7 · Openssh+7
Fabian Bäumer
+2
·
Publicado
2023-12-18
·
Atualizado
2026-05-12
·
CVE-2023-51384
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 9.6
Description
The issue is related to errors in key management in the ssh-agent tool of OpenSSH. It allows an attacker to disclose protected information by exploiting certain destination constraints that are not fully applied when adding PKCS#11-hosted private keys. Specifically, when destination constraints are specified, they are only applied to the first key, even if a PKCS#11 token returns multiple keys. This can be exploited by sending a specially crafted request to obtain sensitive information, which can then be used to launch further attacks against the affected system.
Recommendations
For OpenSSH versions prior to 9.6, update to OpenSSH 9.6 to resolve the issue. As a temporary workaround, consider restricting the use of PKCS#11-hosted private keys until a patch is available. Avoid using the
PKCS#11 token in the affected ssh-agent tool to minimize the risk of exploitation.Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Ibm Aix
Linuxmint
Apple Macos
Openssh
Red Os
Ubuntu