sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-cavsUpgrade openssh-keycatUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-clients | May 13, 2022 | Sep 26, 2021 |
| Alpine Linux | — | Upgrade openssh | Mar 26, 2024 | Sep 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-ldap | Jul 4, 2022 | Sep 26, 2021 |
| Amazon_linux | — | Upgrade openssh | Feb 19, 2022 | Sep 26, 2021 |
| Centos_linux | — | Upgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-debugsourceUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-ldapUpgrade openssh-keycatUpgrade openssh-server-debuginfoUpgrade openssh-cavsUpgrade openssh-ldap-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-debuginfoUpgrade openssh-keycat-debuginfoUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-server-sysvinit | Nov 24, 2021 | Sep 26, 2021 |
| Debian | — | Upgrade openssh | Jan 3, 2024 | Sep 26, 2021 |
| Freebsd | — | Upgrade openssh-portable-gssapiUpgrade openssh-portableUpgrade openssh-portable-hpn | Nov 4, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade openssh | Feb 28, 2022 | Sep 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-server | Mar 2, 2022 | Sep 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade opensshUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-ldapUpgrade openssh-cavsUpgrade openssh-server | Dec 28, 2021 | Sep 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Jan 4, 2022 | Sep 26, 2021 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory14 | Oct 12, 2022 | Sep 26, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Nov 26, 2021 | Sep 26, 2021 |
| Oracle Solaris | — | Upgrade network/ssh to version 8.4.0.1-11.4.40.0.1.107.2 on Solaris 11.4Upgrade network/openssh to version 7.5.0.1-0.175.3.36.0.27.0 on Solaris 11.3Upgrade service/network/ssh to version 8.4.0.1-11.4.40.0.1.107.2 on Solaris 11.4 | Dec 13, 2021 | Sep 26, 2021 |
| Oracle_linux | — | Upgrade opensshUpgrade openssh-ldapUpgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-server-sysvinitUpgrade openssh-cavs | Nov 24, 2021 | Sep 26, 2021 |
| Redhat_linux | — | Upgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-cavsUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-server-debuginfoUpgrade openssh-askpassUpgrade openssh-ldapUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-ldap-debuginfoNo solution existsUpgrade openssh-debuginfoUpgrade openssh-debugsourceUpgrade openssh-askpass-debuginfo | Nov 24, 2021 | Sep 26, 2021 |
| Rocky_linux | — | Upgrade openssh-cavsUpgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-clientsUpgrade openssh-ldap-debuginfoUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycatUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-ldap | May 20, 2022 | Sep 26, 2021 |
| Suse | — | Upgrade openssh-serverUpgrade openssh-cavsUpgrade openssh-helpersUpgrade openssh-fipsUpgrade openssh-clientsUpgrade openssh-openssl1Upgrade opensshUpgrade openssh-openssl1-helpersUpgrade openssh-commonUpgrade openssh-askpass-gnome | Dec 2, 2021 | Sep 26, 2021 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-serverUpgrade openssh-server (Ubuntu Pro) | Oct 11, 2022 | Sep 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
