Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-51384
HistoryDec 18, 2023 - 7:15 p.m.

CVE-2023-51384

2023-12-1819:15:08
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
195
cve-2023-51384
ssh-agent
openssh
nvd
security
pkcs#11

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.

Related

cbl_mariner 1
ubuntucve 1
osv 2
veracode 1
f5 1
alpinelinux 1
redhatcve 1
prion 1
debiancve 1
openvas 6
redos 1
cloudfoundry 1
nessus 4
ibm 1
ubuntu 1
fedora 1
aix 1
photon 1
mageia 1
debian 1
apple 1
cbl_mariner
cbl_mariner
CVE-2023-51384 affecting package openssh for versions less than 8.9p1-3
2024-01-04 19:54:01
ubuntucve
ubuntucve
CVE-2023-51384
2023-12-20 00:00:00
osv
osv
CVE-2023-51384
2023-12-18 19:15:08
openssh vulnerabilities
2024-01-03 18:00:01
veracode
veracode
Improper Authentication
2024-01-30 17:07:03
f5
f5
K000138825 : OpenSSH vulnerability CVE-2023-51384
2024-03-05 00:00:00
alpinelinux
alpinelinux
CVE-2023-51384
2023-12-18 19:15:08
redhatcve
redhatcve
CVE-2023-51384
2023-12-19 21:35:06
prion
prion
Code injection
2023-12-18 19:15:00
debiancve
debiancve
CVE-2023-51384
2023-12-18 19:15:08
openvas
openvas
Fedora: Security Advisory for openssh (FEDORA-2024-7e301327c2)
2024-01-18 00:00:00
OpenBSD OpenSSH < 9.6 Multiple Vulnerabilities (Terrapin Attack)
2023-12-20 00:00:00
Ubuntu: Security Advisory (USN-6565-1)
2024-01-04 00:00:00
redos
redos
ROS-20240319-01
2024-03-19 00:00:00
cloudfoundry
cloudfoundry
USN-6565-1: OpenSSH vulnerabilities | Cloud Foundry
2024-02-29 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : OpenSSH vulnerabilities (USN-6565-1)
2024-01-03 00:00:00
OpenSSH < 9.6 Multiple Vulnerabilities
2023-12-22 00:00:00
Debian DSA-5586-1 : openssh - security update
2023-12-22 00:00:00
ibm
ibm
Security Bulletin: AIX is vulnerable to a machine-in-the-middle attack (CVE-2023-48795), arbitrary command execution (CVE-2023-51385), and information disclosure (CVE-2023-51384) due to OpenSSH
2024-03-14 20:09:59
ubuntu
ubuntu
OpenSSH vulnerabilities
2024-01-03 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: openssh-9.3p1-10.fc39
2024-01-12 01:12:26
aix
aix
AIX is vulnerable to a machine-in-the-middle attack (CVE-2023-48795) arbitrary command execution (CVE-2023-51385) and information disclosure (CVE-2023-51384) due to OpenSSH
2024-02-28 12:58:51
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0188
2024-01-10 00:00:00
mageia
mageia
Updated openssh packages fix security vulnerabilities
2024-01-15 01:23:43
debian
debian
[SECURITY] [DSA 5586-1] openssh security update
2023-12-22 08:59:42
apple
apple
About the security content of macOS Sonoma 14.4
2024-03-07 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for CVE-2023-51384
cbl_mariner1ubuntucve1osv2veracode1f51alpinelinux1redhatcve1prion1debiancve1openvas6redos1cloudfoundry1nessus4ibm1ubuntu1fedora1aix1photon1mageia1debian1apple1