CVE detail
CVE-2023-51384
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.9 · diversity 19.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
11 source links · newest first
- https://cert-portal.siemens.com/productcert/html/ssa-794697.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-769027.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://www.openwall.com/lists/oss-security/2023/12/18/2www.openwall.com
No excerpt available.
Exploitwww.openwall.comDec 18, 2023, 7:15 PM - https://www.openssh.com/txt/release-9.6www.openssh.com
No excerpt available.
Vendor Advisorywww.openssh.comDec 18, 2023, 7:15 PM - https://www.debian.org/security/2023/dsa-5586www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgDec 18, 2023, 7:15 PM - https://support.apple.com/kb/HT214084support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comDec 18, 2023, 7:15 PM - https://security.netapp.com/advisory/ntap-20240105-0005/security.netapp.com
No excerpt available.
Vendor Advisorysecurity.netapp.comDec 18, 2023, 7:15 PM - https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754bgithub.com
No excerpt available.
Exploitgithub.comDec 18, 2023, 7:15 PM - http://seclists.org/fulldisclosure/2024/Mar/21seclists.org
No excerpt available.
Exploitseclists.orgDec 18, 2023, 7:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2024-20952CVSS 7.4 · High
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affect…
- CVE-2024-20926CVSS 5.9 · Medium
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affec…
- CVE-2024-20918CVSS 7.4 · High
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affecte…
- CVE-2022-40964CVSS 7.9 · High
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local acc…
- CVE-2022-27635CVSS 8.2 · High
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local acc…
- CVE-2023-21968CVSS 3.7 · Low
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE:…