sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
Fix
Public exploits 1
- AdnanApriliyansyahh/CVE-2021-41617 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 8
- https://bugzilla.suse.com/show_bug.cgi?id=1190975 Issue Tracking, Patch, Third Party Advisory
- https://www.openssh.com/security.html Vendor Advisory
- https://www.openssh.com/txt/release-8.8 Release Notes, Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1190975 Issue Tracking, Patch, Third Party Advisory
- https://www.openssh.com/security.html Vendor Advisory
- https://www.openssh.com/txt/release-8.8 Release Notes, Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.0 · openbsd, fedoraproject, netappNVD modified 2026-10-14 12:17
Affected (CPE criteria) 16
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*cpe:2.3:a:oracle:http_server:12.2.1.2.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8r13:14398:*:*:*:*:*:*
References 31
- https://bugzilla.suse.com/show_bug.cgi?id=1190975 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
- https://security.netapp.com/advisory/ntap-20211014-0004/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5586
- https://www.openssh.com/security.html Vendor Advisory
- https://www.openssh.com/txt/release-8.8 Release Notes, Vendor Advisory
- https://www.openwall.com/lists/oss-security/2021/09/26/1 Mailing List, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
- https://www.starwindsoftware.com/security/sw-20220805-0001/ Third Party Advisory
- https://www.tenable.com/plugins/nessus/154174
- https://bugzilla.suse.com/show_bug.cgi?id=1190975 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
- https://security.netapp.com/advisory/ntap-20211014-0004/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5586
- https://www.openssh.com/security.html Vendor Advisory
- https://www.openssh.com/txt/release-8.8 Release Notes, Vendor Advisory
- https://www.openwall.com/lists/oss-security/2021/09/26/1 Mailing List, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
- https://www.starwindsoftware.com/security/sw-20220805-0001/ Third Party Advisory
- https://www.tenable.com/plugins/nessus/154174
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html