Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 6.1 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 7.1 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 7.2 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Alpine Linux | — | Upgrade openssh | Sep 20, 2017 | Jan 5, 2017 |
| Amazon_linux | — | Upgrade openssh | Oct 3, 2017 | Jan 4, 2017 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Mar 28, 2017 | Jan 4, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 5, 2017 |
| Centos_linux | — | Upgrade openssh-cavsUpgrade opensshUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade openssh-askpassUpgrade openssh-server-sysvinitUpgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-clientsUpgrade pam_ssh_agent_auth | Aug 28, 2019 | Jan 5, 2017 |
| Debian | — | Upgrade openssh | Feb 25, 2019 | Jan 4, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 24, 2017 |
| Freebsd | — | Upgrade openssh-portableUpgrade FreeBSD | Jan 11, 2017 | Jan 11, 2017 |
| Hpux | — | Apply the remediation from HP for CVE-2016-10009 | Jul 3, 2018 | Jan 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openssh-keycatUpgrade openssh-askpassUpgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Nov 30, 2017 | Jan 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-clients | Nov 30, 2017 | Jan 4, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory10 | Nov 30, 2017 | Jan 4, 2017 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 7.4 | Jan 9, 2017 | Jan 4, 2017 |
| Oracle Solaris | — | Upgrade network/openssh to version 7.4.0.1-0.175.3.20.0.3.0 on Solaris 11.3 | May 29, 2017 | Jan 4, 2017 |
| Oracle_linux | — | Upgrade openssh-server-sysvinitUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-clientsUpgrade opensshUpgrade openssh-ldapUpgrade openssh-keycatUpgrade pam_ssh_agent_auth | Aug 8, 2017 | Dec 19, 2016 |
| Redhat_linux | — | Upgrade openssh-ldapUpgrade openssh-askpassUpgrade openssh-keycatUpgrade opensshUpgrade openssh-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-clientsNo solution existsUpgrade openssh-server-sysvinit | Aug 3, 2017 | Jan 4, 2017 |
| Suse | — | Upgrade openssh-fipsUpgrade openssh-openssl1-helpersUpgrade openssh-askpass-gnomeUpgrade openssh-openssl1Upgrade openssh-clientsUpgrade openssh-helpersUpgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-common | Jan 24, 2017 | Jan 4, 2017 |
| Ubuntu | — | Upgrade openssh-server | Jan 24, 2018 | Jan 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub