Laravel Tech Community
Aug 8, 2023 · Information Security
OpenSSH ssh-agent Client Remote Code Execution Vulnerability (CVE-2023-38408)
A critical OpenSSH ssh-agent vulnerability (CVE-2023-38408) allows attackers to execute arbitrary code on the client by forwarding the agent and loading a malicious shared library, affecting all ssh-agent versions up to 9.3p2 and OpenSSH versions up to 9.3p2‑1, with mitigation recommendations to disable forwarding and upgrade the package.
CVE-2023-38408OpenSSHRemote Code Execution
0 likes · 3 min read