by @jakaba
28 Mar 2024

Exploring OpenSSH's Agent Forwarding RCE (CVE-2023-38408)

by @jakaba
28 Mar 2024

Exploring OpenSSH's Agent Forwarding RCE (CVE-2023-38408)

CVEs

9.8 Critical Severity

Apps

O
OpensshOpenbsd

Screenshots from the blog posts

images/club15awlnyp91hmv5geuaygd.jpgimages/club15awlnyp91hmv5geuaygd.jpg

Summary

The `ssh-agent` acts as a key manager for SSH authentication, facilitating agent forwarding to bypass the need to keep keys on remote hosts. NIST assigned the CVE identifier CVE-2023-38408 on July 19th in response to a critical vulnerability in OpenSSH's PKCS#11 feature prior to version 9.3p2.

Description

users/photos/clj8b3h1k16g10uoihwvzgsxi.png

@jakaba

74 posts

Total vcoins

0

Social media links

Comments (0)