Wind River Support Network


LIN6-12218 : wrlinux 5 - CVE-2016-10009

Created: Jan 8, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 9, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


It was found that ssh-agent could load PKCS#11 modules from paths outside of a trusted whitelist. An attacker able to load a crafted PKCS#11 module across a forwarded agent channel could potentially use this flaw to execute arbitrary code on the system running the ssh-agent. Note that the attacker must have control of the forwarded agent-socket and the ability to write to the filesystem of the host running ssh-agent.

This issue was fixed by only allowing the loading of module from a trusted (and configurable) whitelist.

CVE assignment:

Upstream patch:

Other Downloads

Live chat