Lucene search
MitreCVELIST:CVE-2023-38408HistoryJul 20, 2023 - 12:00 a.m.
CVE-2023-38408
2023-07-2000:00:00
mitre
raw.githubusercontent.com
3
openssh
pkcs#11
remote code execution
incomplete fix
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
Related
nessus
nessus
EulerOS Virtualization 2.11.1 : openssh (EulerOS-SA-2023-3057)
2024-01-16 00:00:00
AlmaLinux 8 : openssh (ALSA-2023:4419)
2023-08-02 00:00:00
Amazon Linux AMI : openssh (ALAS-2023-1802)
2023-08-23 00:00:00
cve
cve
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
alpinelinux
alpinelinux
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:00
broadcom
broadcom
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-2921)
2023-10-10 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-3102)
2023-11-01 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-2816)
2023-09-11 00:00:00
ubuntucve
ubuntucve
CVE-2023-38408
2023-07-19 00:00:00
CVE-2016-10009
2017-01-04 00:00:00
amazon
amazon
Important: openssh
2023-08-03 18:09:00
Important: openssh
2023-08-17 11:39:00
f5
f5
K000135709 : OpenSSH vulnerability CVE-2023-38408
2023-08-02 00:00:00
K31440025 : OpenSSH vulnerability CVE-2016-10009
2017-01-24 00:00:00
debiancve
debiancve
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:00
osv
osv
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
openssh - security update
2023-08-17 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-07-20 11:22:49
prion
prion
Remote code execution
2023-07-20 03:15:00
Design/Logic Flaw
2017-01-05 02:59:00
packetstorm
packetstorm
OpenSSH Forwarded SSH-Agent Remote Code Execution
2023-07-20 00:00:00
OpenSSH Arbitrary Library Loading
2016-12-23 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2016-10009 in openssh-5.3p1
2022-07-04 19:13:43
openssh: Fix of CVE-2023-38408
2023-08-09 10:29:03
cvelist
cvelist
CVE-2016-10009
2017-01-05 00:00:00
myhack58
myhack58
seebug
seebug
OpenSSH remote code execution vulnerability, CVE-2016-10009οΌ
2016-12-21 00:00:00
redhatcve
redhatcve
CVE-2016-10009
2016-12-20 07:47:25
CVE-2023-38408
2023-07-20 07:17:39
zdt
zdt
OpenSSH 7.4 - agent Protocol Arbitrary Library Loading Vulnerability
2016-12-23 00:00:00
ibm
ibm
qualysblog
qualysblog
CVE-2023-38408: Remote Code Execution in OpenSSHβs forwarded ssh-agent
2023-07-19 15:53:27
almalinux
almalinux
Important: openssh security update
2023-08-01 00:00:00
Important: openssh security update
2023-08-01 00:00:00
freebsd
freebsd
FreeBSD -- Potential remote code execution via ssh-agent forwarding
2023-08-01 00:00:00
OpenSSH -- remote code execution via a forwarded agent socket
2023-07-19 00:00:00
openssh -- multiple vulnerabilities
2016-12-25 00:00:00
redhat
redhat
(RHSA-2023:4383) Important: openssh security update
2023-08-01 09:05:07
(RHSA-2023:4384) Important: openssh security update
2023-08-01 09:06:31
(RHSA-2023:4329) Important: openssh security update
2023-07-31 08:48:46
cbl_mariner
cbl_mariner
CVE-2023-38408 affecting package openssh 8.9p1-2
2023-08-15 16:37:27
CVE-2023-38408 affecting package openssh for versions less than 8.9p1-1
2023-08-10 16:37:57
cgr
cgr
CVE-2023-38408 vulnerabilities
2024-05-19 03:07:16
oraclelinux
oraclelinux
openssh security update
2023-08-10 00:00:00
openssh security update
2023-08-02 00:00:00
openssh security update
2023-08-02 00:00:00
debian
debian
[SECURITY] [DLA 3532-1] openssh security update
2023-08-17 01:18:28
ubuntu
ubuntu
OpenSSH vulnerability
2023-07-31 00:00:00
OpenSSH vulnerability
2023-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: openssh-8.8p1-11.fc37
2023-07-28 01:40:23
[SECURITY] Fedora 38 Update: openssh-9.0p1-16.fc38
2023-07-23 01:30:52
[SECURITY] Fedora 25 Update: openssh-7.4p1-1.fc25
2017-01-06 20:25:39
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:08.ssh
2023-08-01 00:00:00
FreeBSD-SA-17:01.openssh
2017-01-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2222
2023-08-29 11:57:56
Advisory ROSA-SA-2023-2229
2023-09-05 09:40:26
rocky
rocky
openssh security update
2023-08-08 12:34:30
centos
centos
openssh, pam_ssh_agent_auth security update
2024-01-12 19:29:35
githubexploit
githubexploit
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-07-21 01:53:10
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-11-09 04:34:39
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-08-09 19:56:07
redos
redos
ROS-20240212-01
2024-02-12 00:00:00
slackware
slackware
[slackware-security] openssh
2023-07-19 20:41:55
cloudfoundry
cloudfoundry
USN-6242-1: OpenSSH vulnerability | Cloud Foundry
2023-08-10 00:00:00
wolfi
wolfi
CVE-2023-38408 vulnerabilities
2024-06-01 15:24:07
thn
thn
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
2023-07-24 09:10:00
aix
aix
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0628
2023-08-05 00:00:00
gentoo
gentoo
OpenSSH: Remote Code Execution
2023-07-20 00:00:00
symantec
symantec
SA144 : OpenSSH Vulnerabilities January 2017
2017-03-02 08:00:00