CVE-2023-28531 Security feature bypass in n/a
OpenSSH ssh-add fails to apply per-hop destination constraints to smartcard keys, allowing bypass of intended security restrictions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-28531?
CVE-2023-28531 is a critical vulnerability in OpenSSH, published on 17 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
Weakness: CWE-284
Which versions are affected by CVE-2023-28531?
It affects 4 products.
Products include Netapp Brocade Fabric Operating System, Netapp Hci Bootstrap Os, Netapp Solidfire Element Os, OpenSSH.
How do I fix CVE-2023-28531?
Upgrade to a fixed version.
Is CVE-2023-28531 being exploited?
There is no known exploitation of CVE-2023-28531 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2023-28531, AZL-25662, DEBIAN-CVE-2023-28531, GHSA-j839-ff8c-f62x, JLSEC-2026-67, UBUNTU-CVE-2023-28531.