Lucene search
F5F5:K000135709HistoryAug 02, 2023 - 12:00 a.m.
K000135709 : OpenSSH vulnerability CVE-2023-38408
2023-08-0200:00:00
my.f5.com
18
openssh
ssh-agent
pkcs#11
insufficiently trustworthy
remote code execution
cve-2023-38408
Security Advisory Description
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. (CVE-2023-38408)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
nessus
nessus
EulerOS 2.0 SP9 : openssh (EulerOS-SA-2023-2901)
2024-01-16 00:00:00
EulerOS 2.0 SP8 : openssh (EulerOS-SA-2023-3140)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-2940)
2023-10-10 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-3074)
2023-10-31 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2023-2846)
2023-09-20 00:00:00
cvelist
cvelist
CVE-2023-38408
2023-07-20 00:00:00
CVE-2016-10009
2017-01-05 00:00:00
amazon
amazon
Important: openssh
2023-08-03 18:09:00
Important: openssh
2023-08-17 11:39:00
ubuntucve
ubuntucve
CVE-2023-38408
2023-07-19 00:00:00
CVE-2016-10009
2017-01-04 00:00:00
osv
osv
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
Important: openssh security update
2023-08-01 00:00:00
debiancve
debiancve
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
alpinelinux
alpinelinux
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
nvd
nvd
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
broadcom
broadcom
cve
cve
CVE-2023-38408
2023-07-20 03:15:10
CVE-2016-10009
2017-01-05 02:59:03
prion
prion
Remote code execution
2023-07-20 03:15:00
Design/Logic Flaw
2017-01-05 02:59:00
veracode
veracode
Remote Code Execution (RCE)
2023-07-20 11:22:49
packetstorm
packetstorm
OpenSSH Forwarded SSH-Agent Remote Code Execution
2023-07-20 00:00:00
OpenSSH Arbitrary Library Loading
2016-12-23 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2016-10009 in openssh-5.3p1
2022-07-04 19:13:43
openssh: Fix of CVE-2023-38408
2023-08-09 10:29:03
myhack58
myhack58
seebug
seebug
OpenSSH remote code execution vulnerability, CVE-2016-10009）
2016-12-21 00:00:00
f5
f5
K31440025 : OpenSSH vulnerability CVE-2016-10009
2017-01-24 00:00:00
redhatcve
redhatcve
CVE-2016-10009
2016-12-20 07:47:25
CVE-2023-38408
2023-07-20 07:17:39
zdt
zdt
OpenSSH 7.4 - agent Protocol Arbitrary Library Loading Vulnerability
2016-12-23 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DLA 3532-1] openssh security update
2023-08-17 01:17:24
cbl_mariner
cbl_mariner
CVE-2023-38408 affecting package openssh for versions less than 8.9p1-1
2023-08-10 16:37:57
CVE-2023-38408 affecting package openssh 8.9p1-2
2023-08-15 16:37:27
redhat
redhat
(RHSA-2023:4329) Important: openssh security update
2023-07-31 08:48:46
(RHSA-2023:4383) Important: openssh security update
2023-08-01 09:05:07
(RHSA-2023:4384) Important: openssh security update
2023-08-01 09:06:31
almalinux
almalinux
Important: openssh security update
2023-08-01 00:00:00
Important: openssh security update
2023-08-01 00:00:00
qualysblog
qualysblog
CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent
2023-07-19 15:53:27
oraclelinux
oraclelinux
openssh security update
2023-08-10 00:00:00
openssh security update
2023-08-02 00:00:00
openssh security update
2023-08-02 00:00:00
freebsd
freebsd
FreeBSD -- Potential remote code execution via ssh-agent forwarding
2023-08-01 00:00:00
openssh -- multiple vulnerabilities
2016-12-25 00:00:00
OpenSSH -- remote code execution via a forwarded agent socket
2023-07-19 00:00:00
cgr
cgr
CVE-2023-38408 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 38 Update: openssh-9.0p1-16.fc38
2023-07-23 01:30:52
[SECURITY] Fedora 37 Update: openssh-8.8p1-11.fc37
2023-07-28 01:40:23
[SECURITY] Fedora 25 Update: openssh-7.4p1-1.fc25
2017-01-06 20:25:39
wolfi
wolfi
CVE-2023-38408 vulnerabilities
2024-07-05 21:08:40
rosalinux
rosalinux
Advisory ROSA-SA-2023-2222
2023-08-29 11:57:56
Advisory ROSA-SA-2023-2229
2023-09-05 09:40:26
rocky
rocky
openssh security update
2023-08-08 12:34:30
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:08.ssh
2023-08-01 00:00:00
FreeBSD-SA-17:01.openssh
2017-01-11 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2024-01-12 19:29:35
ubuntu
ubuntu
OpenSSH vulnerability
2023-07-31 00:00:00
OpenSSH vulnerability
2023-07-24 00:00:00
githubexploit
githubexploit
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-07-21 01:53:10
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-08-09 19:56:07
Exploit for Unquoted Search Path or Element in Openbsd Openssh
2023-11-09 04:34:39
redos
redos
ROS-20240212-01
2024-02-12 00:00:00
slackware
slackware
[slackware-security] openssh
2023-07-19 20:41:55
cloudfoundry
cloudfoundry
USN-6242-1: OpenSSH vulnerability | Cloud Foundry
2023-08-10 00:00:00
aix
aix
thn
thn
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
2023-07-24 09:10:00
gentoo
gentoo
OpenSSH: Remote Code Execution
2023-07-20 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0628
2023-08-05 00:00:00
symantec
symantec
SA144 : OpenSSH Vulnerabilities January 2017
2017-03-02 08:00:00