In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
Medium CVSS 4.3
Summary
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig Product
- https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 Patch
- https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html Mailing List
- https://www.openssh.com/txt/release-10.0 Release Notes
- https://www.openssh.com/txt/release-7.4 Release Notes
- https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html Mailing List
- https://security.netapp.com/advisory/ntap-20250425-0002/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD