CVE-2025-32728
Public on 2025-04-10
Modified on 2025-04-11
Description
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 1 | openssh | No Fix Planned | ||
| Amazon Linux 2 - Core | openssh | 2025-06-12 | ALAS2-2025-2881 | Fixed |
| Amazon Linux 2023 | openssh | 2025-06-23 | ALAS2023-2025-1038 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 4.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
| NVD | CVSSv3 | 3.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N |