CVE-2025-32728

Katalog CVE

CVSS 3.8 · Low EPSS 0,20%

Kerentanan Expected Behavior Violation pada openbsd openssh, debian linux. Skor CVSS 3.1 3.8 (Low) menurut NVD.

Deskripsi (NVD)

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Rincian

Terbit di NVD

10 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.8 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-440: Expected Behavior Violation

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20250425-0002/ advisory pihak ketiga
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig product
• https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html mailing list · product · release notes
• https://www.openssh.com/txt/release-10.0 release notes
• https://www.openssh.com/txt/release-7.4 release notes