RHSA-2023:4329

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2023-38408
Published: 16 Sept 2024, 12:32
Last modified:22 Nov 2025, 12:53

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Sept 2024, 12:32
Published
Vulnerability first disclosed
22 Nov 2025, 12:53
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: openssh security update

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • redhat•openssh

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-askpass

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-askpass-debuginfo

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-clients

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-clients-debuginfo

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-debuginfo

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-debugsource

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-keycat

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-keycat-debuginfo

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-server

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•openssh-server-debuginfo

    < 0:8.7p1-11.el9_0 | < 0:8.7p1-11.el9_0

  • redhat•pam_ssh_agent_auth

    < 0:0.10.4-4.11.el9_0 | < 0:0.10.4-4.11.el9_0

  • redhat•pam_ssh_agent_auth-debuginfo

    < 0:0.10.4-4.11.el9_0 | < 0:0.10.4-4.11.el9_0

References (8)