CVE-2025-32728

Severity

38%

Complexity

20%

Confidentiality

23%

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

CVSS 3.1 Base Score 3.8. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N).

Overview

First reported 3 months ago

2025-04-10 02:15:00

Last updated 2 months ago

2025-05-22 16:51:00

Affected Software

OpenBSD OpenSSH

References

https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig

Product

https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367

Patch

https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html

Mailing List, Third Party Advisory

https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html

Mailing List, Product, Release Notes

https://security.netapp.com/advisory/ntap-20250425-0002/

Third Party Advisory

https://www.openssh.com/txt/release-10.0

Release Notes

https://www.openssh.com/txt/release-7.4

Release Notes

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.