What is CVE-2023-51384?

CVE-2023-51384 is a medium-severity vulnerability affecting OpenSSH before version 9.6 and certain Debian Linux systems. This vulnerability can lead to the disclosure of sensitive information or the addition or modification of data. Systems running OpenSSH before version 9.6, Debian Linux 11.0 and 12.0, and some NetApp products are at risk. Users should update their systems to the latest versions to mitigate this vulnerability and protect their data.

Who is impacted by this?

CVE-2023-51384 affects users of OpenSSH before version 9.6, Debian Linux 11.0 and 12.0, ONTAP 9, and macOS Sonoma 14.4. These systems may be at risk, potentially leading to the disclosure of sensitive information or unauthorized data modification. It's important to update your software to a more secure version.

What to do if CVE-2023-51384 affected you

If you're affected by the CVE-2023-51384 vulnerability, it's important to update your software to a secure version. Follow these steps:

1. Update OpenSSH to version 9.6 or later

2. Update Debian Linux to version 11.1 or later, or 12.1 or later

3. For NetApp products, follow the recommended actions

4. Update macOS Sonoma to version 14.4 or later

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-51384 vulnerability, also known as "Incomplete application of destination constraints in ssh-agent in OpenSSH before 9.6," is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added to the National Vulnerability Database on December 18, 2023. To mitigate this vulnerability, users should update OpenSSH to version 9.6 or later.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-Insufficient Information, indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the sources listed below.

• NetApp Product Security

• Apple Support