Vulnerability-Lookup

UBUNTU-CVE-2021-41617 (CVE-2021-41617)

Vulnerability from osv_ubuntu – Published: 2021-09-26 19:15 – Updated: 2026-10-17 09:08 – Source website

Details

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

Severity

7.0 (High)


                    
                      CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2021-41617	REPORT
	https://www.openwall.com/lists/oss-security/2021/…	REPORT
	https://www.openssh.com/txt/release-8.8	REPORT
	https://www.openssh.com/security.html	REPORT
	https://ubuntu.com/security/notices/USN-5666-1	ADVISORY
	https://ubuntu.com/security/notices/USN-6565-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-41617	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          },
          {
            "binary_name": "ssh-krb5",
            "binary_version": "1:6.6p1-2ubuntu2.13+esm4"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:6.6p1-2ubuntu2.13+esm4?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.2p2-6",
        "1:6.2p2-6ubuntu1",
        "1:6.4p1-1",
        "1:6.4p1-2",
        "1:6.5p1-1",
        "1:6.5p1-2",
        "1:6.5p1-3",
        "1:6.5p1-4",
        "1:6.5p1-6",
        "1:6.6p1-1",
        "1:6.6p1-2",
        "1:6.6p1-2ubuntu1",
        "1:6.6p1-2ubuntu2",
        "1:6.6p1-2ubuntu2.2",
        "1:6.6p1-2ubuntu2.3",
        "1:6.6p1-2ubuntu2.4",
        "1:6.6p1-2ubuntu2.6",
        "1:6.6p1-2ubuntu2.7",
        "1:6.6p1-2ubuntu2.8",
        "1:6.6p1-2ubuntu2.10",
        "1:6.6p1-2ubuntu2.11",
        "1:6.6p1-2ubuntu2.12",
        "1:6.6p1-2ubuntu2.13",
        "1:6.6p1-2ubuntu2.13+esm1",
        "1:6.6p1-2ubuntu2.13+esm2",
        "1:6.6p1-2ubuntu2.13+esm3",
        "1:6.6p1-2ubuntu2.13+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.10+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:7.2p2-4ubuntu2.10+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.9p1-2",
        "1:6.9p1-3",
        "1:7.1p1-1",
        "1:7.1p1-3",
        "1:7.1p1-4",
        "1:7.1p1-6",
        "1:7.1p2-1",
        "1:7.1p2-2",
        "1:7.2p1-1",
        "1:7.2p2-1",
        "1:7.2p2-2",
        "1:7.2p2-3",
        "1:7.2p2-4",
        "1:7.2p2-4ubuntu1",
        "1:7.2p2-4ubuntu2.1",
        "1:7.2p2-4ubuntu2.2",
        "1:7.2p2-4ubuntu2.4",
        "1:7.2p2-4ubuntu2.5",
        "1:7.2p2-4ubuntu2.6",
        "1:7.2p2-4ubuntu2.7",
        "1:7.2p2-4ubuntu2.8",
        "1:7.2p2-4ubuntu2.10",
        "1:7.2p2-4ubuntu2.10+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          },
          {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.3"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:16.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.fips.2.10.3?arch=source\u0026distro=fips-updates/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:7.2p2-4ubuntu2.fips.2.10.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.2p2-4ubuntu2.fips.2.2.3",
        "1:7.2p2-4ubuntu2.fips.2.4.1",
        "1:7.2p2-4ubuntu2.fips.2.4.2",
        "1:7.2p2-4ubuntu2.fips.2.8.1",
        "1:7.2p2-4ubuntu2.fips.2.10.1",
        "1:7.2p2-4ubuntu2.fips.2.10.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          },
          {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS:16.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.fips.2.10.1?arch=source\u0026distro=fips/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.2p2-4ubuntu2.fips.2.2",
        "1:7.2p2-4ubuntu2.fips.2.2.1",
        "1:7.2p2-4ubuntu2.fips.2.10.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm6"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm6"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm6"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm6"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm6"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.6p1-4ubuntu0.7+esm6?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-10",
        "1:7.6p1-4",
        "1:7.6p1-4ubuntu0.1",
        "1:7.6p1-4ubuntu0.2",
        "1:7.6p1-4ubuntu0.3",
        "1:7.6p1-4ubuntu0.5",
        "1:7.6p1-4ubuntu0.6",
        "1:7.6p1-4ubuntu0.7",
        "1:7.6p1-4ubuntu0.7+esm1",
        "1:7.6p1-4ubuntu0.7+esm2",
        "1:7.6p1-4ubuntu0.7+esm3",
        "1:7.6p1-4ubuntu0.7+esm4",
        "1:7.6p1-4ubuntu0.7+esm5",
        "1:7.6p1-4ubuntu0.7+esm6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-10"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-10?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-8",
        "1:7.5p1-9",
        "1:7.5p1-9build1",
        "1:7.5p1-10"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:18.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.9p1-10~ubuntu18.04.fips.0.10?arch=source\u0026distro=fips-updates/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.9p1-10~ubuntu18.04.fips.0.1",
        "1:7.9p1-10~ubuntu18.04.fips.0.2",
        "1:7.9p1-10~ubuntu18.04.fips.0.3",
        "1:7.9p1-10~ubuntu18.04.fips.0.4",
        "1:7.9p1-10~ubuntu18.04.fips.0.5",
        "1:7.9p1-10~ubuntu18.04.fips.0.6",
        "1:7.9p1-10~ubuntu18.04.fips.0.7",
        "1:7.9p1-10~ubuntu18.04.fips.0.8",
        "1:7.9p1-10~ubuntu18.04.fips.0.9",
        "1:7.9p1-10~ubuntu18.04.fips.0.10"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS:18.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.9p1-10~ubuntu18.04.fips.0.2?arch=source\u0026distro=fips/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.9p1-10~ubuntu18.04.fips.0.1",
        "1:7.9p1-10~ubuntu18.04.fips.0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.11?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.2p1-4ubuntu0.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.0p1-6build1",
        "1:8.1p1-1",
        "1:8.1p1-5",
        "1:8.2p1-4",
        "1:8.2p1-4ubuntu0.1",
        "1:8.2p1-4ubuntu0.2",
        "1:8.2p1-4ubuntu0.3",
        "1:8.2p1-4ubuntu0.4",
        "1:8.2p1-4ubuntu0.5",
        "1:8.2p1-4ubuntu0.7",
        "1:8.2p1-4ubuntu0.8",
        "1:8.2p1-4ubuntu0.9",
        "1:8.2p1-4ubuntu0.10"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-11build1"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-11build1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-11build1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.11"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:20.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.fips.0.11?arch=source\u0026distro=fips-updates/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.2p1-4ubuntu0.fips.0.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.2p1-4ubuntu0.fips.0.2.1",
        "1:8.2p1-4ubuntu0.fips.0.4.0",
        "1:8.2p1-4ubuntu0.fips.0.5.0",
        "1:8.2p1-4ubuntu0.fips.0.7",
        "1:8.2p1-4ubuntu0.fips.0.8",
        "1:8.2p1-4ubuntu0.fips.0.9",
        "1:8.2p1-4ubuntu0.fips.0.10"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS:20.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.fips.0.2.1?arch=source\u0026distro=fips/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.2p1-4ubuntu0.fips.0.2.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-13"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-13?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-12",
        "1:7.5p1-12build1",
        "1:7.5p1-13"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-16"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-16?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-14",
        "1:7.5p1-15",
        "1:7.5p1-15build1",
        "1:7.5p1-16"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-17"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-17?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-17"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-18ubuntu2"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-18ubuntu2?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-18",
        "1:7.5p1-18ubuntu1",
        "1:7.5p1-18ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.5p1-18"
          }
        ],
        "priority_reason": "Cannot be reproduced on Ubuntu since sshd drops groups early"
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "openssh-ssh1",
        "purl": "pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-18?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.5p1-17",
        "1:7.5p1-18"
      ]
    }
  ],
  "aliases": [],
  "details": "sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.",
  "id": "UBUNTU-CVE-2021-41617",
  "modified": "2026-10-17T09:08:36Z",
  "published": "2021-09-26T19:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-41617"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2021/09/26/1"
    },
    {
      "type": "REPORT",
      "url": "https://www.openssh.com/txt/release-8.8"
    },
    {
      "type": "REPORT",
      "url": "https://www.openssh.com/security.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5666-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6565-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41617"
    }
  ],
  "related": [
    "USN-5666-1",
    "USN-6565-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-41617"
  ]
}

CVE-2021-41617 (GCVE-0-2021-41617)

Vulnerability from cvelistv5 – Published: 2021-09-26 00:00 – Updated: 2026-10-14 11:53

Summary

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-08 21:05 UTC

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2334 records in the last 180 days details

References

17 references

URL	Tags
https://www.openssh.com/security.html
https://www.openwall.com/lists/oss-security/2021/…
https://www.openssh.com/txt/release-8.8
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
https://bugzilla.suse.com/show_bug.cgi?id=1190975
https://security.netapp.com/advisory/ntap-2021101…
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.starwindsoftware.com/security/sw-2022…
https://www.tenable.com/plugins/nessus/154174
https://www.debian.org/security/2023/dsa-5586	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

9 products

Vendor	Product	Version
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T03:15:29.208Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssh.com/security.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2021/09/26/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssh.com/txt/release-8.8"
          },
          {
            "name": "FEDORA-2021-1f7339271d",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/"
          },
          {
            "name": "FEDORA-2021-f8df0f8563",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/"
          },
          {
            "name": "FEDORA-2021-fa0e94198f",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1190975"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211014-0004/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20220805-0001/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.tenable.com/plugins/nessus/154174"
          },
          {
            "name": "DSA-5586",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5586"
          },
          {
            "name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T11:53:49.653Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html"
          }
        ],
        "x_adpType": "supplier"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-41617",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-08T21:05:18.878932Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-08T21:13:49.311Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-26T04:06:21.619Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.com/security.html"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2021/09/26/1"
        },
        {
          "url": "https://www.openssh.com/txt/release-8.8"
        },
        {
          "name": "FEDORA-2021-1f7339271d",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/"
        },
        {
          "name": "FEDORA-2021-f8df0f8563",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/"
        },
        {
          "name": "FEDORA-2021-fa0e94198f",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1190975"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20211014-0004/"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "url": "https://www.starwindsoftware.com/security/sw-20220805-0001/"
        },
        {
          "url": "https://www.tenable.com/plugins/nessus/154174"
        },
        {
          "name": "DSA-5586",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5586"
        },
        {
          "name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-41617",
    "datePublished": "2021-09-26T00:00:00.000Z",
    "dateReserved": "2021-09-26T00:00:00.000Z",
    "dateUpdated": "2026-10-14T11:53:49.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

USN-5666-1 (UBUNTU-CVE-2021-41617)

Vulnerability from osv_ubuntu – Published: 2022-10-10 17:50 – Updated: 2026-06-25 10:46 – Source website

Summary

openssh vulnerability

Details

It was discovered that OpenSSH incorrectly handled certain helper programs. An attacker could possibly use this issue to arbitrary code execution.

References

URL

Type

	https://ubuntu.com/security/notices/USN-5666-1	ADVISORY
	https://ubuntu.com/security/CVE-2021-41617	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-41617",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          },
          {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.10+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:7.2p2-4ubuntu2.10+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.9p1-2",
        "1:6.9p1-3",
        "1:7.1p1-1",
        "1:7.1p1-3",
        "1:7.1p1-4",
        "1:7.1p1-6",
        "1:7.1p2-1",
        "1:7.1p2-2",
        "1:7.2p1-1",
        "1:7.2p2-1",
        "1:7.2p2-2",
        "1:7.2p2-3",
        "1:7.2p2-4",
        "1:7.2p2-4ubuntu1",
        "1:7.2p2-4ubuntu2.1",
        "1:7.2p2-4ubuntu2.2",
        "1:7.2p2-4ubuntu2.4",
        "1:7.2p2-4ubuntu2.5",
        "1:7.2p2-4ubuntu2.6",
        "1:7.2p2-4ubuntu2.7",
        "1:7.2p2-4ubuntu2.8",
        "1:7.2p2-4ubuntu2.10",
        "1:7.2p2-4ubuntu2.10+esm1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that OpenSSH incorrectly handled certain helper programs.\nAn attacker could possibly use this issue to arbitrary code execution.\n",
  "id": "USN-5666-1",
  "modified": "2026-06-25T10:46:08Z",
  "published": "2022-10-10T17:50:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5666-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-41617"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "openssh vulnerability",
  "upstream": [
    "UBUNTU-CVE-2021-41617"
  ]
}

USN-6565-1 (UBUNTU-CVE-2021-41617)

Vulnerability from osv_ubuntu – Published: 2024-01-03 18:00 – Updated: 2026-05-29 17:44 – Source website

Summary

openssh vulnerabilities

Details

It was discovered that OpenSSH incorrectly handled supplemental groups when running helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand as a different user. An attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-41617)

It was discovered that OpenSSH incorrectly added destination constraints when PKCS#11 token keys were added to ssh-agent, contrary to expectations. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-51384)

It was discovered that OpenSSH incorrectly handled user names or host names with shell metacharacters. An attacker could possibly use this issue to perform OS command injection. (CVE-2023-51385)

References

URL

Type

	https://ubuntu.com/security/notices/USN-6565-1	ADVISORY
	https://ubuntu.com/security/CVE-2021-41617	REPORT
	https://ubuntu.com/security/CVE-2023-51384	REPORT
	https://ubuntu.com/security/CVE-2023-51385	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-41617",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51385",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.11?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.2p1-4ubuntu0.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.0p1-6build1",
        "1:8.1p1-1",
        "1:8.1p1-5",
        "1:8.2p1-4",
        "1:8.2p1-4ubuntu0.1",
        "1:8.2p1-4ubuntu0.2",
        "1:8.2p1-4ubuntu0.3",
        "1:8.2p1-4ubuntu0.4",
        "1:8.2p1-4ubuntu0.5",
        "1:8.2p1-4ubuntu0.7",
        "1:8.2p1-4ubuntu0.8",
        "1:8.2p1-4ubuntu0.9",
        "1:8.2p1-4ubuntu0.10"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-51384",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51385",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "openssh-client",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          },
          {
            "binary_name": "openssh-server",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          },
          {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          },
          {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          },
          {
            "binary_name": "ssh",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          },
          {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.9p1-3ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "openssh",
        "purl": "pkg:deb/ubuntu/openssh@1:8.9p1-3ubuntu0.6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:8.9p1-3ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.4p1-6ubuntu2",
        "1:8.7p1-2",
        "1:8.7p1-2build1",
        "1:8.7p1-4",
        "1:8.8p1-1",
        "1:8.9p1-3",
        "1:8.9p1-3ubuntu0.1",
        "1:8.9p1-3ubuntu0.3",
        "1:8.9p1-3ubuntu0.4",
        "1:8.9p1-3ubuntu0.5"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that OpenSSH incorrectly handled supplemental groups when\nrunning helper programs for AuthorizedKeysCommand and\nAuthorizedPrincipalsCommand as a different user. An attacker could possibly\nuse this issue to escalate privileges. This issue only affected Ubuntu\n20.04 LTS. (CVE-2021-41617)\n\nIt was discovered that OpenSSH incorrectly added destination constraints\nwhen PKCS#11 token keys were added to ssh-agent, contrary to expectations.\nThis issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04.\n(CVE-2023-51384)\n\nIt was discovered that OpenSSH incorrectly handled user names or host names\nwith shell metacharacters. An attacker could possibly use this issue to\nperform OS command injection. (CVE-2023-51385)\n",
  "id": "USN-6565-1",
  "modified": "2026-05-29T17:44:09Z",
  "published": "2024-01-03T18:00:01Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6565-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-41617"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-51384"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-51385"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "openssh vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-41617",
    "UBUNTU-CVE-2023-51384",
    "UBUNTU-CVE-2023-51385"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2021-41617 (CVE-2021-41617)

CVE-2021-41617 (GCVE-0-2021-41617)

USN-5666-1 (UBUNTU-CVE-2021-41617)

USN-6565-1 (UBUNTU-CVE-2021-41617)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour