CVE-2025-32728
CVE-2025-32728
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
openssh
- Versions
- ≥ 7.4, < 10.0: Affected (custom)
Update to 10.0
openssh Debian:12
- Versions
- 1:9.2p1-2
- 1:9.2p1-2+deb12u1
- 1:9.2p1-2+deb12u2
- 1:9.2p1-2+deb12u3
- 1:9.2p1-2+deb12u4
- 1:9.2p1-2+deb12u5
- Affected ranges
- ECOSYSTEM: < 1:9.2p1-2+deb12u6
Update to 1:9.2p1-2+deb12u6
openssh Debian:13
- Affected ranges
- ECOSYSTEM: < 1:10.0p1-1
Update to 1:10.0p1-1
openssh Debian:14
- Affected ranges
- ECOSYSTEM: < 1:10.0p1-1
Update to 1:10.0p1-1
openssh Ubuntu:Pro:18.04:LTS
- Versions
- 1:7.5p1-10
- 1:7.6p1-4
- 1:7.6p1-4ubuntu0.1
- 1:7.6p1-4ubuntu0.2
- 1:7.6p1-4ubuntu0.3
- 1:7.6p1-4ubuntu0.5
- 1:7.6p1-4ubuntu0.6
- 1:7.6p1-4ubuntu0.7
- 1:7.6p1-4ubuntu0.7+esm1
- 1:7.6p1-4ubuntu0.7+esm2
- 1:7.6p1-4ubuntu0.7+esm3
- 1:7.6p1-4ubuntu0.7+esm4
- 1:7.6p1-4ubuntu0.7+esm5
- 1:7.6p1-4ubuntu0.7+esm6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:18.04:LTS
- Versions
- 1:7.5p1-8
- 1:7.5p1-9
- 1:7.5p1-9build1
- 1:7.5p1-10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS-updates:18.04:LTS
- Versions
- 1:7.9p1-10~ubuntu18.04.fips.0.1
- 1:7.9p1-10~ubuntu18.04.fips.0.2
- 1:7.9p1-10~ubuntu18.04.fips.0.3
- 1:7.9p1-10~ubuntu18.04.fips.0.4
- 1:7.9p1-10~ubuntu18.04.fips.0.5
- 1:7.9p1-10~ubuntu18.04.fips.0.6
- 1:7.9p1-10~ubuntu18.04.fips.0.7
- 1:7.9p1-10~ubuntu18.04.fips.0.8
- 1:7.9p1-10~ubuntu18.04.fips.0.9
- 1:7.9p1-10~ubuntu18.04.fips.0.10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS:18.04:LTS
- Versions
- 1:7.9p1-10~ubuntu18.04.fips.0.1
- 1:7.9p1-10~ubuntu18.04.fips.0.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:20.04:LTS
- Versions
- 1:8.0p1-6build1
- 1:8.1p1-1
- 1:8.1p1-5
- 1:8.2p1-4
- 1:8.2p1-4ubuntu0.1
- 1:8.2p1-4ubuntu0.2
- 1:8.2p1-4ubuntu0.3
- 1:8.2p1-4ubuntu0.4
- 1:8.2p1-4ubuntu0.5
- 1:8.2p1-4ubuntu0.7
- 1:8.2p1-4ubuntu0.8
- 1:8.2p1-4ubuntu0.9
- 1:8.2p1-4ubuntu0.10
- 1:8.2p1-4ubuntu0.11
- 1:8.2p1-4ubuntu0.12
- Affected ranges
- ECOSYSTEM: < 1:8.2p1-4ubuntu0.13
Update to 1:8.2p1-4ubuntu0.13
openssh-ssh1 Ubuntu:20.04:LTS
- Versions
- 1:7.5p1-11build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS-updates:20.04:LTS
- Versions
- 1:8.2p1-4ubuntu0.fips.0.2.1
- 1:8.2p1-4ubuntu0.fips.0.4.0
- 1:8.2p1-4ubuntu0.fips.0.5.0
- 1:8.2p1-4ubuntu0.fips.0.7
- 1:8.2p1-4ubuntu0.fips.0.8
- 1:8.2p1-4ubuntu0.fips.0.9
- 1:8.2p1-4ubuntu0.fips.0.10
- 1:8.2p1-4ubuntu0.fips.0.11
- 1:8.2p1-4ubuntu0.fips.0.12
- Affected ranges
- ECOSYSTEM: < 1:8.2p1-4ubuntu0.fips.0.13
Update to 1:8.2p1-4ubuntu0.fips.0.13
openssh Ubuntu:Pro:FIPS:20.04:LTS
- Versions
- 1:8.2p1-4ubuntu0.fips.0.2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:22.04:LTS
- Versions
- 1:8.4p1-6ubuntu2
- 1:8.7p1-2
- 1:8.7p1-2build1
- 1:8.7p1-4
- 1:8.8p1-1
- 1:8.9p1-3
- 1:8.9p1-3ubuntu0.1
- 1:8.9p1-3ubuntu0.3
- 1:8.9p1-3ubuntu0.4
- 1:8.9p1-3ubuntu0.5
- 1:8.9p1-3ubuntu0.6
- 1:8.9p1-3ubuntu0.7
- 1:8.9p1-3ubuntu0.10
- 1:8.9p1-3ubuntu0.11
- Affected ranges
- ECOSYSTEM: < 1:8.9p1-3ubuntu0.13
Update to 1:8.9p1-3ubuntu0.13
openssh-ssh1 Ubuntu:22.04:LTS
- Versions
- 1:7.5p1-12
- 1:7.5p1-12build1
- 1:7.5p1-13
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS-preview:22.04:LTS
- Versions
- 1:8.9p1-3ubuntu0.4+Fips1
- 1:8.9p1-3ubuntu0.4+Fips3
- 1:8.9p1-3ubuntu1.fips.0~ppa3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS-updates:22.04:LTS
- Versions
- 1:8.9p1-3ubuntu0.4+Fips1
- 1:8.9p1-3ubuntu0.4+Fips3
- 1:8.9p1-3ubuntu0.6+Fips1
- 1:8.9p1-3ubuntu0.7+Fips1
- 1:8.9p1-3ubuntu0.10+Fips1
- 1:8.9p1-3ubuntu0.11+Fips1
- Affected ranges
- ECOSYSTEM: < 1:8.9p1-3ubuntu0.13+Fips1
Update to 1:8.9p1-3ubuntu0.13+Fips1
openssh Ubuntu:24.04:LTS
- Versions
- 1:9.3p1-1ubuntu3
- 1:9.4p1-1ubuntu1
- 1:9.6p1-3ubuntu1
- 1:9.6p1-3ubuntu2
- 1:9.6p1-3ubuntu11
- 1:9.6p1-3ubuntu12
- 1:9.6p1-3ubuntu13
- 1:9.6p1-3ubuntu13.3
- 1:9.6p1-3ubuntu13.4
- 1:9.6p1-3ubuntu13.5
- 1:9.6p1-3ubuntu13.7
- 1:9.6p1-3ubuntu13.8
- 1:9.6p1-3ubuntu13.9
- Affected ranges
- ECOSYSTEM: < 1:9.6p1-3ubuntu13.11
Update to 1:9.6p1-3ubuntu13.11
openssh-ssh1 Ubuntu:24.04:LTS
- Versions
- 1:7.5p1-14
- 1:7.5p1-15
- 1:7.5p1-15build1
- 1:7.5p1-16
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh Ubuntu:Pro:FIPS-updates:24.04:LTS
- Versions
- 1:9.6p1-3ubuntu13.7+Fips1
- Affected ranges
- ECOSYSTEM: < 1:9.6p1-3ubuntu13.12+Fips1
Update to 1:9.6p1-3ubuntu13.12+Fips1
openssh Ubuntu:25.10
- Versions
- 1:9.9p1-3ubuntu3
- Affected ranges
- ECOSYSTEM: < 1:9.9p1-3ubuntu3.1
Update to 1:9.9p1-3ubuntu3.1
openssh-ssh1 Ubuntu:25.10
- Versions
- 1:7.5p1-17
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:26.10
- Versions
- 1:7.5p1-18
- 1:7.5p1-18ubuntu1
- 1:7.5p1-18ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:26.04:LTS
- Versions
- 1:7.5p1-17
- 1:7.5p1-18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
- https://www.openssh.com/txt/release-10.0
- https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
- https://www.openssh.com/txt/release-7.4
- https://security.netapp.com/advisory/ntap-20250425-0002/
- https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-32728