ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
References
Link | Resource |
---|---|
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/ | |
https://security.gentoo.org/glsa/202307-01 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20230413-0008/ | Third Party Advisory |
https://www.debian.org/security/2023/dsa-5586 | |
https://www.openwall.com/lists/oss-security/2023/03/15/8 | Mailing List Release Notes |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-03-17T00:00:00
Updated: 2024-02-12T03:06:25.997488
Reserved: 2023-03-17T00:00:00
Link: CVE-2023-28531
JSON object: View
NVD Information
Status : Modified
Published: 2023-03-17T04:15:14.553
Modified: 2024-02-12T03:15:32.443
Link: CVE-2023-28531
JSON object: View
Redhat Information
No data.
CWE