In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Dec 1, 2025 | Apr 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade openssh-debuginfoUpgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-cavsUpgrade openssh-server-sysvinitUpgrade openssh-keycatUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-clients | Jun 13, 2025 | Apr 10, 2025 |
| Amazon_linux_2023 | — | Upgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-server-debuginfoUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-server | Jun 24, 2025 | Apr 10, 2025 |
| Check Point Gaia | — | Upgrade to supported version Check Point Gaia. | Feb 25, 2026 | May 4, 2025 |
| Debian | — | Upgrade openssh | May 9, 2025 | Apr 10, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | Jul 11, 2025 | Apr 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Jul 21, 2025 | Apr 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jul 1, 2025 | Apr 10, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory19 | Jun 11, 2025 | Apr 10, 2025 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.0 | May 26, 2025 | Apr 10, 2025 |
| Oracle_linux | — | Upgrade openssh-askpassUpgrade opensshUpgrade openssh-keycatUpgrade openssh-keysignUpgrade openssh-clientsUpgrade openssh-server | Dec 3, 2025 | Apr 10, 2025 |
| Redhat_linux | — | Upgrade openssh-keysign-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-sk-dummy-debuginfoNo solution existsUpgrade openssh-clientsUpgrade opensshUpgrade openssh-debugsourceUpgrade openssh-askpassUpgrade openssh-keysignUpgrade openssh-clients-debuginfoUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-keycat-debuginfoUpgrade openssh-server | Jul 9, 2025 | Apr 10, 2025 |
| Rocky_linux | — | Upgrade openssh-keysign-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-debugsourceUpgrade openssh-server-debuginfoUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-askpassUpgrade openssh-askpass-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade openssh-keysign | May 25, 2026 | May 21, 2026 |
| Suse | — | Upgrade openssh-serverUpgrade openssh-fipsUpgrade openssh-helpersUpgrade openssh-clientsUpgrade openssh-server-config-disallow-rootloginUpgrade openssh-askpass-gnomeUpgrade opensshUpgrade openssh-cavsUpgrade openssh-common | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-client | Apr 25, 2025 | Apr 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub