CVE-2023-51384
5.5 MEDIUMIn ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied
Published: 2023-12-18 · Last updated: 2026-05-28
Severity and scoring
- CVSS
- 5.5 MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CWE
- CWE-284
Affected products
| Vendor | Product |
|---|---|
| debian | debian_linux, openssh |
| openbsd | debian_linux, openssh |
Description
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2023-51384
- [Other]http://seclists.org/fulldisclosure/2024/Mar/21
- [Patch]https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754b
- [Other]https://security.netapp.com/advisory/ntap-20240105-0005/
- [Other]https://support.apple.com/kb/HT214084
- [Other]https://www.debian.org/security/2023/dsa-5586
- [Other]https://www.openssh.com/txt/release-9.6
- [Other]https://www.openwall.com/lists/oss-security/2023/12/18/2
- [Other]http://seclists.org/fulldisclosure/2024/Mar/21
- [Patch]https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754b
- [Other]https://security.netapp.com/advisory/ntap-20240105-0005/
- [Other]https://support.apple.com/kb/HT214084
- [Other]https://www.debian.org/security/2023/dsa-5586
- [Other]https://www.openssh.com/txt/release-9.6
- [Other]https://www.openwall.com/lists/oss-security/2023/12/18/2
- [Other]https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- [Other]https://cert-portal.siemens.com/productcert/html/ssa-769027.html
- [Other]https://cert-portal.siemens.com/productcert/html/ssa-794697.html
Related CVEs
Same vendor
- CVE-2026-49975 — Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP ... (7.5 HIGH)
- CVE-2026-31431 — In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly r... (7.8 HIGH)
- CVE-2026-4775 — A flaw was found in the libtiff library (7.8 HIGH)
- CVE-2026-3497 — Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions (7.5 HIGH)
- CVE-2026-2219 — It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the dat... (7.5 HIGH)
Same CWE
- CVE-2026-46695 — Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to ru... (10.0 CRITICAL)
- CVE-2026-50564 — Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes (9.9 CRITICAL)
- CVE-2026-50563 — Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes (9.9 CRITICAL)
- CVE-2026-50545 — Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes (9.9 CRITICAL)
- CVE-2026-49824 — Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes (8.5 HIGH)