The vulnerability of the OpenSSH cryptographic protection mechanism lies in the insecure management of privileges. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

🗓️ 20 Jul 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

OpenSSH privilege management flaw enables data access, integrity compromise, and service failures.

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to privilege escalation due to CVE-2021-41617	22 Jun 202210:25	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH for IBM i is affected by CVE-2021-41617	1 Dec 202123:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System (Sailfish) [CVE-2023-51385, CVE-2023-48795, CVE-2023-38408, CVE-2020-15778, CVE-2021-41617].	20 May 202509:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2021-41617)	18 May 202214:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)	12 Mar 202201:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is using components with known vulnerabilities	31 Mar 202214:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2019-10086, CVE-2021-41617)	23 Jun 202216:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	16 Feb 202210:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Vulnerability in OpenSSH. (CVE-2021-41617)	7 Jul 202210:45	–	ibm

Vulners

Node

OR

openbsd opensshRange6.2–8.8

canonical ubuntuMatch14.04

Source	Link
github	www.github.com/openssh/openssh-portable/commit/bf944e3794eff5413f2df1ef37cddf96918c6bde
github	www.github.com/openssh/openssh-portable/commit/f3cbe43e28fe71427d41cfe3a17125b972710455
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41617
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-41617
ubuntu	www.ubuntu.com/security/CVE-2021-41617
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD
openssh	www.openssh.com/txt/release-8.8
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti

01 Jun 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 37.8

EPSS0.02545

OpenSSH privilege management data access integrity compromise service failures