Digging Into An Interesting New CVE

CVE-2023-38408, discovered by the Qualys Threat Research Unit (TRU), describes an RCE (remote code execution) vulnerability made possible by an unwanted interaction between OpenSSH’s ssh-agent executable, the dlopen() and dlclose() functions used by a process to load shared libraries, and various other deficiencies in libraries present (or installable) in many Linux distributions. What is the... Read more »

The post Digging Into An Interesting New CVE appeared first on Deepfactor.

The post Digging Into An Interesting New CVE appeared …

agent code code execution cve distributions functions linux linux distributions openssh process qualys rce remote code remote code execution research ssh ssh-agent threat threat research vulnerability what is