Summary
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11
providers. If a user forwarded their ssh-agent to an untrusted system, a
remote attacker could possibly use this issue to load arbitrary libraries
from the user's system and execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openssh | 1:8.2p1-4ubuntu0.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | openssh | 1:8.9p1-3ubuntu0.3 |
Vulnerabilities 1
-
Critical 9.8
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remo…
References
-
report
https://ubuntu.com/security/CVE-2023-38408