VDB
RHSA-2023%3A4889
RHSA-2023%3A4889
PUBLISHED
CVSS 9.800000190734863 CRITICAL
A vulnerability was found in OpenSSH. The PKCS#11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system (the code in /usr/lib is not necessarily safe for loading into ssh-agent). This flaw allows an attacker with control of the forwarded agent-socket on the server and the ability to write to the filesystem of the client host to execute arbitrary code with the privileges of the user running the ssh-agent.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | devworkspace/devworkspace-project-clone-rhel8@sha256:17e535028dea4aeeb6d6709a2fe3abfbc1d2f33709d7e9e216c9e58b5f519a91_ppc64le as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-project-clone-rhel8@sha256:17e535028dea4aeeb6d6709a2fe3abfbc1d2f33709d7e9e216c9e58b5f519a91_ppc64le |
| Red Hat | devworkspace/devworkspace-operator-bundle@sha256:c0944468eec87646b3d7702577393e0bde343f892e6abc3202d46e5a3049341d_s390x as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-operator-bundle@sha256:c0944468eec87646b3d7702577393e0bde343f892e6abc3202d46e5a3049341d_s390x |
| Red Hat | devworkspace/devworkspace-project-clone-rhel8@sha256:0a602da178432c733b3163c4be21f153ff57971247c13e144f48fb2df4522a5b_s390x as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-project-clone-rhel8@sha256:0a602da178432c733b3163c4be21f153ff57971247c13e144f48fb2df4522a5b_s390x |
| Red Hat | devworkspace/devworkspace-rhel8-operator@sha256:2965b996432749b212d7a0437ac29450096fb00bff0a8e90c879da38e91a9a0c_s390x as a component of Devworkspace 1.0 for RHEL 8 | * |
| Red Hat | devworkspace/devworkspace-operator-bundle@sha256:d97da395e5370ddfc6bed0a36b0bf4e8923fdc7b281541619a2244554bc22fc5_ppc64le as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-operator-bundle@sha256:d97da395e5370ddfc6bed0a36b0bf4e8923fdc7b281541619a2244554bc22fc5_ppc64le |
| Red Hat | devworkspace/devworkspace-operator-bundle@sha256:a185d4573a72c5f4bf0847aa17b6c8efdcc63ce7c4f936018b57c5a024ecf971_amd64 as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-operator-bundle@sha256:a185d4573a72c5f4bf0847aa17b6c8efdcc63ce7c4f936018b57c5a024ecf971_amd64 |
| Red Hat | devworkspace/devworkspace-rhel8-operator@sha256:eef32cc05cbfa99bdf7b98a0ca7c53c6412b347a5984e2c4564fa26cefaec471_amd64 as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-rhel8-operator@sha256:eef32cc05cbfa99bdf7b98a0ca7c53c6412b347a5984e2c4564fa26cefaec471_amd64 |
| Red Hat | devworkspace/devworkspace-rhel8-operator@sha256:2079028c1f40b18bb0b8fdc6f334a54bc15b7487088ca04623a7ef98ef36d9be_ppc64le as a component of Devworkspace 1.0 for RHEL 8 | * |
| Red Hat | devworkspace/devworkspace-project-clone-rhel8@sha256:042ee6de1b850b0fc3f656158c0c0d34d8ba83b5715c8e0eeb71855085fcbe4a_amd64 as a component of Devworkspace 1.0 for RHEL 8 | devworkspace/devworkspace-project-clone-rhel8@sha256:042ee6de1b850b0fc3f656158c0c0d34d8ba83b5715c8e0eeb71855085fcbe4a_amd64 |
Timeline
- Aug 30, 2023 CVE Published
- Mar 18, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:4889 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2224173 issue
- https://issues.redhat.com/browse/CRW-4641 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4889.json advisory
- https://access.redhat.com/security/cve/CVE-2023-38408 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-38408 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-38408 advisory
- https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt advisory