CVE-2025-32728
EUVD-2025-1050410.04.2025, 02:15
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openbsd | openssh | 7.4 ≤ 𝑥 < 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openssh |
| ||||||||||||||||||||
| openssh-ssh1 |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| openssh |
| ||||
| openssh-askpass |
| ||||
| openssh-cavs |
| ||||
| openssh-clients |
| ||||
| openssh-clients-debuginfo |
| ||||
| openssh-debuginfo |
| ||||
| openssh-debugsource |
| ||||
| openssh-keycat |
| ||||
| openssh-keycat-debuginfo |
| ||||
| openssh-ldap |
| ||||
| openssh-server |
| ||||
| openssh-server-debuginfo |
| ||||
| openssh-server-sysvinit |
| ||||
| pam_ssh_agent_auth |
| ||||
| pam_ssh_agent_auth-debuginfo |
|
Azure Linux Releases
Common Weakness Enumeration
References