RHSA-2023:4382

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2023:4382

Import Source

https://security.access.redhat.com/data/osv/RHSA-2023:4382.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2023:4382

Upstream

CVE-2023-38408

Published

2024-09-16T12:33:30Z

Modified

2025-09-11T12:11:00Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: openssh security update

Details

References

Affected packages

Red Hat:enterprise_linux:7::client

openssh

Package

Name: openssh
Purl: pkg:rpm/redhat/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-askpass

Package

Name: openssh-askpass
Purl: pkg:rpm/redhat/openssh-askpass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-cavs

Package

Name: openssh-cavs
Purl: pkg:rpm/redhat/openssh-cavs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-clients

Package

Name: openssh-clients
Purl: pkg:rpm/redhat/openssh-clients

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-debuginfo

Package

Name: openssh-debuginfo
Purl: pkg:rpm/redhat/openssh-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-keycat

Package

Name: openssh-keycat
Purl: pkg:rpm/redhat/openssh-keycat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-ldap

Package

Name: openssh-ldap
Purl: pkg:rpm/redhat/openssh-ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server

Package

Name: openssh-server
Purl: pkg:rpm/redhat/openssh-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server-sysvinit

Package

Name: openssh-server-sysvinit
Purl: pkg:rpm/redhat/openssh-server-sysvinit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

pam_ssh_agent_auth

Package

Name: pam_ssh_agent_auth
Purl: pkg:rpm/redhat/pam_ssh_agent_auth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.3-2.23.el7_9

Red Hat:enterprise_linux:7::computenode

openssh

Package

Name: openssh
Purl: pkg:rpm/redhat/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-askpass

Package

Name: openssh-askpass
Purl: pkg:rpm/redhat/openssh-askpass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-cavs

Package

Name: openssh-cavs
Purl: pkg:rpm/redhat/openssh-cavs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-clients

Package

Name: openssh-clients
Purl: pkg:rpm/redhat/openssh-clients

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-debuginfo

Package

Name: openssh-debuginfo
Purl: pkg:rpm/redhat/openssh-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-keycat

Package

Name: openssh-keycat
Purl: pkg:rpm/redhat/openssh-keycat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-ldap

Package

Name: openssh-ldap
Purl: pkg:rpm/redhat/openssh-ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server

Package

Name: openssh-server
Purl: pkg:rpm/redhat/openssh-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server-sysvinit

Package

Name: openssh-server-sysvinit
Purl: pkg:rpm/redhat/openssh-server-sysvinit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

pam_ssh_agent_auth

Package

Name: pam_ssh_agent_auth
Purl: pkg:rpm/redhat/pam_ssh_agent_auth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.3-2.23.el7_9

Red Hat:enterprise_linux:7::server

openssh

Package

Name: openssh
Purl: pkg:rpm/redhat/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-askpass

Package

Name: openssh-askpass
Purl: pkg:rpm/redhat/openssh-askpass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-cavs

Package

Name: openssh-cavs
Purl: pkg:rpm/redhat/openssh-cavs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-clients

Package

Name: openssh-clients
Purl: pkg:rpm/redhat/openssh-clients

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-debuginfo

Package

Name: openssh-debuginfo
Purl: pkg:rpm/redhat/openssh-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-keycat

Package

Name: openssh-keycat
Purl: pkg:rpm/redhat/openssh-keycat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-ldap

Package

Name: openssh-ldap
Purl: pkg:rpm/redhat/openssh-ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server

Package

Name: openssh-server
Purl: pkg:rpm/redhat/openssh-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server-sysvinit

Package

Name: openssh-server-sysvinit
Purl: pkg:rpm/redhat/openssh-server-sysvinit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

pam_ssh_agent_auth

Package

Name: pam_ssh_agent_auth
Purl: pkg:rpm/redhat/pam_ssh_agent_auth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.3-2.23.el7_9

Red Hat:enterprise_linux:7::workstation

openssh

Package

Name: openssh
Purl: pkg:rpm/redhat/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-askpass

Package

Name: openssh-askpass
Purl: pkg:rpm/redhat/openssh-askpass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-cavs

Package

Name: openssh-cavs
Purl: pkg:rpm/redhat/openssh-cavs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-clients

Package

Name: openssh-clients
Purl: pkg:rpm/redhat/openssh-clients

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-debuginfo

Package

Name: openssh-debuginfo
Purl: pkg:rpm/redhat/openssh-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-keycat

Package

Name: openssh-keycat
Purl: pkg:rpm/redhat/openssh-keycat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-ldap

Package

Name: openssh-ldap
Purl: pkg:rpm/redhat/openssh-ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server

Package

Name: openssh-server
Purl: pkg:rpm/redhat/openssh-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

openssh-server-sysvinit

Package

Name: openssh-server-sysvinit
Purl: pkg:rpm/redhat/openssh-server-sysvinit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4p1-23.el7_9

pam_ssh_agent_auth

Package

Name: pam_ssh_agent_auth
Purl: pkg:rpm/redhat/pam_ssh_agent_auth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.3-2.23.el7_9