CVE-2023-38408

概要

参考情報

• packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html · Exploit
• openwall.com/lists/oss-security/2023/07/20/1 · Exploit
• openwall.com/lists/oss-security/2023/07/20/2 · Mailing List
• openwall.com/lists/oss-security/2023/09/22/11
• openwall.com/lists/oss-security/2023/09/22/9
• blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent · Third Party Advisory
• openbsd/src commit 7bc29a9 · Patch
• openbsd/src commit f03a4fa · Patch
• openbsd/src commit f8f5a6b · Patch
• lists.debian.org/debian-lts-announce/2023/08/msg00021.html

openssh のその他の脆弱性

• CVE-2026-106583高 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587低 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586中 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585中 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584低 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…