ByteOS Network

CVE Vulnerability Details :

CVE-2023-38408

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-20 Jul, 2023 | 00:00

Updated At-15 Oct, 2024 | 18:33

▼CVE Numbering Authority (CNA)

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://news.ycombinator.com/item?id=36790196	N/A
https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent	N/A
https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt	N/A
https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca	N/A
https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8	N/A
https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d	N/A
https://www.openssh.com/txt/release-9.3p2	N/A
https://www.openssh.com/security.html	N/A
https://security.gentoo.org/glsa/202307-01	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/07/20/1	mailing-list
http://www.openwall.com/lists/oss-security/2023/07/20/2	mailing-list
http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/	vendor-advisory
https://security.netapp.com/advisory/ntap-20230803-0010/	N/A
https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html	mailing-list
http://www.openwall.com/lists/oss-security/2023/09/22/9	mailing-list
http://www.openwall.com/lists/oss-security/2023/09/22/11	mailing-list
https://support.apple.com/kb/HT213940	N/A
https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408	N/A

Hyperlink: https://news.ycombinator.com/item?id=36790196

Resource: N/A

Hyperlink: https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent

Resource: N/A

Hyperlink: https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt

Resource: N/A

Hyperlink: https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca

Resource: N/A

Hyperlink: https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8

Resource: N/A

Hyperlink: https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d

Resource: N/A

Hyperlink: https://www.openssh.com/txt/release-9.3p2

Resource: N/A

Hyperlink: https://www.openssh.com/security.html

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202307-01

Resource:

vendor-advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2023/07/20/1

Resource:

mailing-list

Hyperlink: http://www.openwall.com/lists/oss-security/2023/07/20/2

Resource:

mailing-list

Hyperlink: http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/

Resource:

vendor-advisory

Hyperlink: https://security.netapp.com/advisory/ntap-20230803-0010/

Resource: N/A

Hyperlink: https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html

Resource:

mailing-list

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/9

Resource:

mailing-list

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/11

Resource:

mailing-list

Hyperlink: https://support.apple.com/kb/HT213940

Resource: N/A

Hyperlink: https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://news.ycombinator.com/item?id=36790196	x_transferred
https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent	x_transferred
https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt	x_transferred
https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca	x_transferred
https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8	x_transferred
https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d	x_transferred
https://www.openssh.com/txt/release-9.3p2	x_transferred
https://www.openssh.com/security.html	x_transferred
https://security.gentoo.org/glsa/202307-01	vendor-advisory x_transferred
http://www.openwall.com/lists/oss-security/2023/07/20/1	mailing-list x_transferred
http://www.openwall.com/lists/oss-security/2023/07/20/2	mailing-list x_transferred
http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/	vendor-advisory x_transferred
https://security.netapp.com/advisory/ntap-20230803-0010/	x_transferred
https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html	mailing-list x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/9	mailing-list x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/11	mailing-list x_transferred
https://support.apple.com/kb/HT213940	x_transferred
https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408	x_transferred