UpHeron
All vulnerabilities

Servers and applications

CVE-2023-51384

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.

Severity
Medium 5.5
Published
18 Dec 2023
Last changed
15 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
9.6
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSHServers and applications · cpe:a:openbsd:openssh
  • From 8.9 before 9.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-51384
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-51384