GHSA-m4xr-866g-83x6

GHSA-m4xr-866g-83x6 PUBLISHED

Record from GitHub Advisory Database · Published May 3, 2022

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

Timeline

May 3, 2022 CVE Published
Apr 9, 2026 Distribution Patch
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-m4xr-866g-83x6
vulnetix vdb fixes GHSA-m4xr-866g-83x6

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-m4xr-866g-83x6/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2008-1483 advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html url
http://secunia.com/advisories/29554 url
http://secunia.com/advisories/29676 url
http://secunia.com/advisories/29686 url
http://secunia.com/advisories/29873 url
http://secunia.com/advisories/30249 url
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1 url
http://support.attachmate.com/techdocs/2374.html url
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483 url
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188 url
http://www.vupen.com/english/advisories/2008/1124/references url
http://www.vupen.com/english/advisories/2008/1630/references url
http://secunia.com/advisories/30086 url
https://issues.rpath.com/browse/RPL-2397 url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085 url
https://usn.ubuntu.com/597-1 url
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011 url
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html url
http://secunia.com/advisories/29522 url

…and 34 more

Look up in the Resolve Platform →