CVE-2021-28041
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.5%
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Produtos afetados
n/a · n/aReferências
https://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568dbhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQWGII3LQR4AOTPPFXGMTYE7UDEWIUKI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXST2CML2MWY3PNVUXX7FFJE3ATJMNVZ/https://security.gentoo.org/glsa/202105-35https://security.netapp.com/advisory/ntap-20210416-0002/https://www.openssh.com/security.htmlhttps://www.openssh.com/txt/release-8.5https://www.openwall.com/lists/oss-security/2021/03/03/1https://www.oracle.com//security-alerts/cpujul2021.html