References https://nvd.nist.gov/vuln/detail/CVE-2023-51385 https://www.openssh.com/txt/release-9.6 https://github.com/WLaoDuo/CVE-2023-51385_poc-test https://avd.aliyun.com/detail?id=AVD-2023-51385 https://blog.nsfocus.net/opensshcve-2023-51385/ https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html https://ubuntu.com/security/CVE-2023-51385 https://access.redhat.com/security/cve/cve-2023-51385 https://github.com/saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC https://bbs.huaweicloud.com/blogs/420078
Related VulnerabilitiesOpenSSH ProxyCommand 命令注入漏洞PoCCVE-2023-48795: OpenSSH Terrapin Attack - DetectionPoCeol-openssh-debian: EOL Debian OpenSSH - DetectMicrosoft Windows OpenSSH 访问控制不当漏洞 可导致远程代码执行Microsoft Windows OpenSSH 访问控制不当漏洞OpenSSH CVE-2024-6387 远程代码执行漏洞OpenSSH 条件竞争漏洞OpenSSH 远程代码执行漏洞OpenSSH CVE-2023-48795 Terrapin攻击漏洞OpenSSH CVE-2023-48795 Terrapin 攻击漏洞OpenSSH ProxyCommand命令注入漏洞OpenSSH 远程命令执行漏洞OpenSSH-用户枚举漏洞(CVE-2018-15473)