CVE-2016-10009

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.4 OpenSSH versions prior to 9.3p2

Description The issue is related to an untrusted search path vulnerability in the ssh-agent component of OpenSSH, which can be exploited by remote attackers to execute arbitrary local PKCS#11 modules. This can be achieved by leveraging control over a forwarded agent-socket. The vulnerability allows for remote code execution.

Recommendations For OpenSSH versions prior to 7.4, update to version 7.4 or later to resolve the issue. For OpenSSH versions prior to 9.3p2, update to version 9.3p2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ssh-agent component until a patch is available.