The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opensshUpgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-cavsUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-keycat | Aug 3, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade openssh | Mar 26, 2024 | Jul 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openssh-keycatUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-askpassUpgrade opensshUpgrade openssh-serverUpgrade openssh-cavsUpgrade openssh-server-sysvinitUpgrade openssh-debuginfo | Aug 9, 2023 | Jul 20, 2023 |
| Amazon_linux | — | Upgrade openssh | Aug 23, 2023 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade openssh-keycat-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_auth-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-serverUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-keycat | Feb 17, 2025 | Jul 19, 2023 |
| Apple Osx Airport | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appsandbox | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appstore | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Asktobuy | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Authkit | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bootp | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Clock | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreanimation | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coredata | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreimage | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Devtools | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Fileprovider | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gamecenter | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Graphicsdrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloud | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Imagecapture | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Ioacceleratorfamily | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Iouserethernet | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libpcap | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxslt | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Messages | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Music | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Netfsframework | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Notes | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Dec 27, 2023 | Jul 20, 2023 |
| Centos_linux | — | Upgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-cavsUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade openssh-server | Aug 2, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade openssh | Aug 18, 2023 | Jul 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Freebsd | — | Upgrade openssh-portableUpgrade openssh-portable-hpnUpgrade FreeBSDUpgrade openssh-portable-gssapi | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Jul 20, 2023 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-ldapUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-cavs | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jan 10, 2024 | Jul 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory15 | Aug 24, 2023 | Jul 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 9.3p2 | Aug 2, 2023 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-server | Aug 3, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-serverUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-clients-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-server-sysvinitUpgrade openssh-ldap-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-debugsourceUpgrade opensshUpgrade openssh-ldapUpgrade openssh-keycat-debuginfoUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-cavsUpgrade openssh-debuginfo | Aug 1, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openssh-askpassUpgrade openssh-ldap-debuginfoUpgrade openssh-keycatUpgrade opensshUpgrade openssh-server-debuginfoUpgrade openssh-clientsUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-debugsourceUpgrade openssh-debuginfoUpgrade openssh-cavsUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-serverUpgrade openssh-ldap | Mar 5, 2024 | Jul 20, 2023 |
| Suse | — | Upgrade opensshUpgrade openssh-helpersUpgrade openssh-serverUpgrade openssh-commonUpgrade openssh-cavsUpgrade openssh-askpass-gnomeUpgrade openssh-clientsUpgrade openssh-fips | Jul 24, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-client (Ubuntu Pro) | Jul 25, 2023 | Jul 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub