In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-opensshalma-upgrade-openssh-askpassalma-upgrade-openssh-cavsalma-upgrade-openssh-clientsalma-upgrade-openssh-keycatalma-upgrade-openssh-ldapalma-upgrade-openssh-serveralma-upgrade-pam_ssh_agent_auth | Feb 1, 2024 | Dec 18, 2023 | |
| Alpine Linux | alpine-linux-upgrade-openssh | Mar 26, 2024 | Dec 18, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-opensshamazon-linux-ami-2-upgrade-openssh-askpassamazon-linux-ami-2-upgrade-openssh-cavsamazon-linux-ami-2-upgrade-openssh-clientsamazon-linux-ami-2-upgrade-openssh-debuginfoamazon-linux-ami-2-upgrade-openssh-keycatamazon-linux-ami-2-upgrade-openssh-ldapamazon-linux-ami-2-upgrade-openssh-serveramazon-linux-ami-2-upgrade-openssh-server-sysvinitamazon-linux-ami-2-upgrade-pam_ssh_agent_auth | Apr 2, 2024 | Dec 18, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-opensshamazon-linux-2023-upgrade-openssh-clientsamazon-linux-2023-upgrade-openssh-clients-debuginfoamazon-linux-2023-upgrade-openssh-debuginfoamazon-linux-2023-upgrade-openssh-debugsourceamazon-linux-2023-upgrade-openssh-keycatamazon-linux-2023-upgrade-openssh-keycat-debuginfoamazon-linux-2023-upgrade-openssh-serveramazon-linux-2023-upgrade-openssh-server-debuginfoamazon-linux-2023-upgrade-pam-ssh-agent-authamazon-linux-2023-upgrade-pam-ssh-agent-auth-debuginfo | Feb 17, 2025 | Dec 18, 2023 | |
| Apple Osx Openssh | apple-osx-upgrade-latest | Jun 25, 2026 | Jun 25, 2026 | |
| Aruba Aos 10 | aruba-aos-10-cve-2023-51385 | Jan 14, 2025 | Aug 6, 2024 | |
| Aruba Aos Cx | aruba-aos-cx-cve-2023-51385 | Feb 24, 2025 | Mar 5, 2024 | |
| Aruba Ecos | aruba-ecos-cve-2023-51385 | Mar 17, 2025 | Jul 23, 2024 | |
| Debian | debian-upgrade-openssh | Dec 27, 2023 | Dec 18, 2023 | |
| Dell Powerstore Dsa2024398 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 17, 2024 | |
| Dell Powerstore Dsa2024408 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Sep 26, 2024 | |
| Dell Powerstore Dsa2024432 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 29, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openssh | Dec 28, 2023 | Dec 18, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-opensshhuawei-euleros-2_0_sp10-upgrade-openssh-clientshuawei-euleros-2_0_sp10-upgrade-openssh-server | Mar 13, 2024 | Dec 18, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-opensshhuawei-euleros-2_0_sp11-upgrade-openssh-clientshuawei-euleros-2_0_sp11-upgrade-openssh-server | Mar 13, 2024 | Dec 18, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-opensshhuawei-euleros-2_0_sp8-upgrade-openssh-askpasshuawei-euleros-2_0_sp8-upgrade-openssh-cavshuawei-euleros-2_0_sp8-upgrade-openssh-clientshuawei-euleros-2_0_sp8-upgrade-openssh-keycathuawei-euleros-2_0_sp8-upgrade-openssh-ldaphuawei-euleros-2_0_sp8-upgrade-openssh-server | Mar 13, 2024 | Dec 18, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-opensshhuawei-euleros-2_0_sp9-upgrade-openssh-clientshuawei-euleros-2_0_sp9-upgrade-openssh-server | Feb 12, 2024 | Dec 18, 2023 | |
| Ibm Aix | ibm-aix-openssh_advisory16 | Feb 29, 2024 | Dec 18, 2023 | |
| Openbsd Openssh | openbsd-openssh-upgrade-9_6 | Dec 27, 2023 | Dec 18, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-opensshoracle-linux-upgrade-openssh-askpassoracle-linux-upgrade-openssh-cavsoracle-linux-upgrade-openssh-clientsoracle-linux-upgrade-openssh-keycatoracle-linux-upgrade-openssh-ldaporacle-linux-upgrade-openssh-serveroracle-linux-upgrade-pam-ssh-agent-auth | Feb 1, 2024 | Dec 18, 2023 |
| Redhat_linux | redhat-upgrade-opensshredhat-upgrade-openssh-askpassredhat-upgrade-openssh-askpass-debuginforedhat-upgrade-openssh-cavsredhat-upgrade-openssh-cavs-debuginforedhat-upgrade-openssh-clientsredhat-upgrade-openssh-clients-debuginforedhat-upgrade-openssh-debuginforedhat-upgrade-openssh-debugsourceredhat-upgrade-openssh-keycatredhat-upgrade-openssh-keycat-debuginforedhat-upgrade-openssh-ldapredhat-upgrade-openssh-ldap-debuginforedhat-upgrade-openssh-serverredhat-upgrade-openssh-server-debuginforedhat-upgrade-openssh-sk-dummy-debuginforedhat-upgrade-pam_ssh_agent_authredhat-upgrade-pam_ssh_agent_auth-debuginfo | Jan 26, 2024 | Dec 18, 2023 | |
| Suse | — | suse-upgrade-opensshsuse-upgrade-openssh-askpass-gnomesuse-upgrade-openssh-cavssuse-upgrade-openssh-clientssuse-upgrade-openssh-commonsuse-upgrade-openssh-fipssuse-upgrade-openssh-helperssuse-upgrade-openssh-serversuse-upgrade-openssh-server-config-disallow-rootloginsuse-upgrade-openssh-testuser | Feb 23, 2024 | Dec 18, 2023 |
| Ubuntu | ubuntu-pro-upgrade-openssh-clientubuntu-pro-upgrade-openssh-serverubuntu-upgrade-openssh-clientubuntu-upgrade-openssh-server | Jan 4, 2024 | Dec 18, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub