CVE-2023-51384
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In ssh-agent in OpenSSH before 9.6, destination constraints can be incompletely applied when adding PKCS#11-hosted private keys. Constraints are only applied to the first key, even if the PKCS#11 token returns multiple keys.
Risk Assessment
The risk is that administrators may unknowingly allow additional keys without destination constraints, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to immediately upgrade OpenSSH to version 9.6 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.