CVE detail
CVE-2023-51384
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 25.6 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
12 source links · newest first
00 CPU 1518(F)-4 PN/DP MFP are affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/>=3.1.6 (CVE-2021-41617, CVE-2023-28531, CVE-2023-51384, CVE-2023-52927, CVE-2024-26783, CVE-2024-27056, CVE-2024-28956, CVE-2024-36903, CVE-2024-36927, CVE-2024-42079, CVE-2024-46786, CVE-2024-47736, CVE-2024-47809, CVE-2024-49968, CVE-2024-4
governmentwww.cisa.govJul 28, 2026, 12:00 PM- https://cert-portal.siemens.com/productcert/html/ssa-794697.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-769027.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comDec 18, 2023, 7:15 PM - https://www.openwall.com/lists/oss-security/2023/12/18/2www.openwall.com
No excerpt available.
Exploitwww.openwall.comDec 18, 2023, 7:15 PM - https://www.openssh.com/txt/release-9.6www.openssh.com
No excerpt available.
Vendor Advisorywww.openssh.comDec 18, 2023, 7:15 PM - https://www.debian.org/security/2023/dsa-5586www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgDec 18, 2023, 7:15 PM - https://support.apple.com/kb/HT214084support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comDec 18, 2023, 7:15 PM - https://security.netapp.com/advisory/ntap-20240105-0005/security.netapp.com
No excerpt available.
Vendor Advisorysecurity.netapp.comDec 18, 2023, 7:15 PM - https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754bgithub.com
No excerpt available.
Exploitgithub.comDec 18, 2023, 7:15 PM - http://seclists.org/fulldisclosure/2024/Mar/21seclists.org
No excerpt available.
Exploitseclists.orgDec 18, 2023, 7:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2024-20952CVSS 7.4 · High
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affect…
- CVE-2024-20926CVSS 5.9 · Medium
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affec…
- CVE-2024-20918CVSS 7.4 · High
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affecte…
- CVE-2022-40964CVSS 7.9 · High
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local acc…
- CVE-2022-27635CVSS 8.2 · High
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local acc…
- CVE-2023-21968CVSS 3.7 · Low
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE:…