The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-askpassUpgrade openssh-cavsUpgrade opensshUpgrade openssh-ldapUpgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clients | Aug 3, 2023 | Jul 20, 2023 |
| Alpine Linux | — | Upgrade openssh | Mar 26, 2024 | Jul 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade opensshUpgrade openssh-ldapUpgrade openssh-keycatUpgrade pam_ssh_agent_auth | Aug 9, 2023 | Jul 20, 2023 |
| Amazon_linux | — | Upgrade openssh | Aug 23, 2023 | Jul 20, 2023 |
| Amazon_linux_2023 | — | Upgrade opensshUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-serverUpgrade openssh-keycat-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-keycat | Feb 17, 2025 | Jul 19, 2023 |
| Apple Osx Airport | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appsandbox | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Appstore | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Asktobuy | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Authkit | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Bootp | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Clock | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreanimation | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coredata | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coreimage | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Devtools | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Fileprovider | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gamecenter | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Graphicsdrivers | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloud | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Imagecapture | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Ioacceleratorfamily | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Iouserethernet | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libpcap | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Libxslt | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Messages | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Music | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Netfsframework | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Notes | — | — | Oct 14, 2024 | Jul 20, 2023 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Dec 27, 2023 | Jul 20, 2023 |
| Centos_linux | — | Upgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-serverUpgrade openssh-server-sysvinitUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-cavsUpgrade openssh-debuginfo | Aug 2, 2023 | Jul 20, 2023 |
| Debian | — | Upgrade openssh | Aug 18, 2023 | Jul 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable-gssapiUpgrade openssh-portable-hpnUpgrade openssh-portable | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Jul 20, 2023 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssh-cavsUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-askpassUpgrade opensshUpgrade openssh-serverUpgrade openssh-ldap | Jan 10, 2024 | Jul 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Jan 10, 2024 | Jul 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory15 | Aug 24, 2023 | Jul 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 9.3p2 | Aug 2, 2023 | Jul 20, 2023 |
| Oracle_linux | — | Upgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade opensshUpgrade openssh-cavsUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-keycat | Aug 3, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade openssh-server-debuginfoUpgrade openssh-server-sysvinitUpgrade pam_ssh_agent_auth-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-cavs-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-serverUpgrade openssh-askpass-debuginfoUpgrade opensshUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-ldapUpgrade openssh-keycatUpgrade openssh-keycat-debuginfoUpgrade openssh-debugsourceUpgrade openssh-ldap-debuginfo | Aug 1, 2023 | Jul 20, 2023 |
| Rocky_linux | — | Upgrade openssh-server-debuginfoUpgrade openssh-ldap-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-serverUpgrade openssh-cavs-debuginfoUpgrade openssh-debuginfoUpgrade openssh-debugsourceUpgrade openssh-ldapUpgrade openssh-cavs | Mar 5, 2024 | Jul 20, 2023 |
| Suse | — | Upgrade openssh-helpersUpgrade opensshUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-fipsUpgrade openssh-askpass-gnomeUpgrade openssh-commonUpgrade openssh-cavs | Jul 24, 2023 | Jul 20, 2023 |
| Ubuntu | — | Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-client | Jul 25, 2023 | Jul 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub