CVEvulnerability
CVE-2025-32728
3.8 LOW
Official page ↗
- Status
- Modified
- Published
- 2025-04-10
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 3.8 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-440
Description
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
Affected configurations
• openbsd openssh (>= 7.4 < 10.0)
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-440 Expected Behavior Violation weakness
References
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig Product
- https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 Patch
- https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html Mailing List, Product, Release Notes
- https://www.openssh.com/txt/release-10.0 Release Notes
- https://www.openssh.com/txt/release-7.4 Release Notes
- https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20250425-0002/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html cert-portal.siemens.com