摘要:
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
安全等级: Low
公告ID: KylinSec-SA-2024-2036
发布日期: 2024年5月27日
关联CVE: CVE-2023-28531
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2023-28531 | KY3.4-4A | openssh | Unaffected |
| CVE-2023-28531 | KY3.4-5 | openssh | Unaffected |
| CVE-2023-28531 | KY3.5.1 | openssh | Unaffected |
| CVE-2023-28531 | KY3.5.2 | openssh | Unaffected |
| CVE-2023-28531 | V6 | openssh | Unaffected |
