The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-keycatUpgrade opensshUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-ldapUpgrade openssh-server | Aug 3, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade openssh | Mar 26, 2024 | Jul 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openssh-keycatUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-serverUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-askpass | Aug 9, 2023 | Jul 20, 2023 |
| Amazon_linux | — | Upgrade openssh | Aug 23, 2023 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade openssh-keycat-debuginfoUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-clients | Feb 17, 2025 | Jul 19, 2023 |
| Apple Osx Airport | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appsandbox | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appstore | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Asktobuy | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Authkit | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bootp | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Clock | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreanimation | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coredata | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreimage | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Devtools | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Fileprovider | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gamecenter | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Graphicsdrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloud | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Imagecapture | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Ioacceleratorfamily | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Iouserethernet | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libpcap | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxslt | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Messages | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Music | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Netfsframework | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Notes | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Dec 27, 2023 | Jul 20, 2023 |
| Centos_linux | — | Upgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-server-sysvinitUpgrade openssh-debuginfoUpgrade openssh-serverUpgrade opensshUpgrade openssh-cavsUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-ldap | Aug 2, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade openssh | Aug 18, 2023 | Jul 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable-gssapiUpgrade openssh-portable-hpnUpgrade openssh-portable | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Jul 20, 2023 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade opensshUpgrade openssh-cavsUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-ldapUpgrade openssh-server | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jan 10, 2024 | Jul 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory15 | Aug 24, 2023 | Jul 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 9.3p2 | Aug 2, 2023 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-server | Aug 3, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade openssh-debuginfoUpgrade openssh-ldapUpgrade openssh-ldap-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-askpassUpgrade openssh-askpass-debuginfoUpgrade openssh-debugsourceUpgrade opensshUpgrade openssh-cavsUpgrade openssh-keycatUpgrade openssh-cavs-debuginfoUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade pam_ssh_agent_auth-debuginfo | Aug 1, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openssh-ldapUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-askpass-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-debuginfoUpgrade openssh-debugsourceUpgrade openssh-keycat-debuginfoUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-ldap-debuginfoUpgrade openssh-keycatUpgrade openssh-server-debuginfoUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade openssh-clients | Mar 5, 2024 | Jul 20, 2023 |
| Suse | — | Upgrade openssh-cavsUpgrade openssh-fipsUpgrade openssh-askpass-gnomeUpgrade openssh-clientsUpgrade openssh-commonUpgrade openssh-serverUpgrade openssh-helpersUpgrade openssh | Jul 24, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-client (Ubuntu Pro) | Jul 25, 2023 | Jul 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub