Test ID:	1.3.6.1.4.1.25623.1.0.104634
Category:	General
Title:	OpenBSD OpenSSH 8.9 - 9.2 Unspecified Vulnerability
Summary:	OpenBSD OpenSSH is prone to an unspecified vulnerability.
Description:	Summary: OpenBSD OpenSSH is prone to an unspecified vulnerability. Vulnerability Insight: ssh-add(1): when adding smartcard keys to ssh-agent(1) with the per-hop destination constraints (ssh-add -h ...) added in OpenSSH 8.9, a logic error prevented the constraints from being communicated to the agent. This resulted in the keys being added without constraints. The common cases of non-smartcard keys and keys without destination constraints are unaffected. This problem was reported by Luci Stanescu. Affected Software/OS: OpenBSD OpenSSH versions starting from 8.9 and prior to 9.3. Solution: Update to version 9.3 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-28531 Debian Security Information: DSA-5586 (Google Search) https://www.debian.org/security/2023/dsa-5586 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/ https://security.gentoo.org/glsa/202307-01 https://www.openwall.com/lists/oss-security/2023/03/15/8
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.