Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29818
HistoryMar 24, 2021 - 5:11 p.m.

Remote Code Execution (RCE)

2021-03-2417:11:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
308
openssh
remote code execution
vulnerability
agent forwarding
attacker-controlled host
unconstrained access
legacy operating system

EPSS

0.002

Percentile

55.8%

OpenSSH is vulnerable to remote code execution. The vulnerability exists due to a forwarding of an agent to an attacker-controlled host on an unconstrained agent-socket access on a legacy operating system.