How to check OpenSSH version in VCF Operations for Networks appliances

Products

• VCF Operations for Networks

Issue/Introduction

You may be concerned about a published Ubuntu CVE, for example CVE-2021-28041 published by Ubuntu regarding OpenSSH, and whether it affects your deployment of VCF Operations for Networks.

 

 

NOTE:  VCF Operations for Networks was formerly named Aria Operations for Networks (AON), and prior to that was named vRealize Network Insight (vRNI).

Resolution

The version of OpenSSH in a VCF Operations for Networks deployment can be confirmed by the following:

1. SSH into any Platform or Collector node, logging in as the support user.
2. Enter the following commands:

ub
ssh -V

Once you know the version of OpenSSH, you can compare it against any CVE published by Ubuntu to determine if it may be affected. 

In the example of VCF Operations for Networks 6.14, the response to the above commands is:

OpenSSH 8.9p1 Ubuntu-3ubuntu0.13, OpenSSL 3.0.8 7 Feb 2023

indicating that the OpenSSH version is 8.9p1, and, therefore, unaffected by this CVE.

If you think your deployment could be affected, then please log a case for validation as per KB 142884 Creating and managing Broadcom support request (SR) cases.