openssh may set DISPLAY even if it's unable to listen on respective port

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 IPv4 and sniffing a cookie sent by Emacs...

CVE-2025-6010

...

CVE-2023-6010

...

CVE-2025-6010

CVE-2025-6010 is connected to OpenBao’s timing side-channel in the userpass authentication method. The OpenBao advisory notes that user enumeration is possible due to timing differences between non-existent users and users with stored credentials, independent of credential validity. The issue is ...

CVE-2023-6010

CVE-2023-6010 entry is rejected/not used per the description; not an active vulnerability entry.