Does vulnerability-CVE-2023-51385 have any impact on PanOS firewalls, Panorama or Wildfire?

[Netdata1]

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

[PavelK · Accepted solution]

Hello @Netdata1

PAN-OS is not affected by this vulnerability. As per OSS listing: OSS Listing even latest PAN-OS is running OpenSSH 8.0p1, while this vulnerability affects versions 9.0p1 – 9.5p1.

Kind Regards

Pavel

[AkashThangavel]

Hi PavelK,

The KB article you provided contains a different CVE number. Please verify its accuracy. If the provided information is correct, kindly provide the rationale behind sharing that particular KB

regards,

Akash Thangavel

Network Security Engineer

[PavelK]

Hello @AkashThangavel

you are correct. The link for KB I provided was indeed incorrect. I have already edited my original post. Thank you for pointing this out!

Kind Regards

Pavel

[ivanemoore]

Where does the vulnerability say 9.0p1 – 9.5p1?   According to NIST, it is "OpenSSH before 9.6".

https://nvd.nist.gov/vuln/detail/CVE-2023-51385

[PavelK]

Hello @ivanemoore

thanks for post.

You can find details for CVE-2023-51385 here: https://www.cybersecurity-help.cz/vdb/SB2023121905. I had the same impression that anything below 9.6 is affected, however this does not seem to be case. In the past I opened a TAC ticket for this and could confirm that PAN-OS is not affected by this vulnerability.

Kind Regards

Pavel