CVE-2021-28041

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 05-03-2021 10:15

Last modified: - 20-05-2022 10:47

Total changes: - 13

Description

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

Required

User interaction

7.1

Base score

1.2

5.9

Exploitability score

Impact score

Verification logic

vendor=openbsd AND product=openssh AND versionStartIncluding=8.2 AND versionEndExcluding=8.5

vendor=fedoraproject AND product=fedora AND version=33

vendor=fedoraproject AND product=fedora AND version=34

vendor=netapp AND product=cloud_backup AND version=-

vendor=netapp AND product=solidfire AND version=-

vendor=netapp AND product=hci_management_node AND version=-

AND

vendor=netapp AND product=hci_compute_node_firmware AND version=-

vendor=netapp AND product=hci_compute_node AND version=-

AND

vendor=netapp AND product=hci_storage_node_firmware AND version=-

vendor=netapp AND product=hci_storage_node AND version=-

vendor=oracle AND product=zfs_storage_appliance AND version=8.8

vendor=oracle AND product=communications_offline_mediation_controller AND version=12.0.0.3.0

Reference

https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db
https://www.openssh.com/txt/release-8.5
https://www.openwall.com/lists/oss-security/2021/03/03/1
https://www.openssh.com/security.html
FEDORA-2021-f68a5a75ba-Third Party Advisory
https://security.netapp.com/advisory/ntap-20210416-0002/
GLSA-202105-35-Third Party Advisory
FEDORA-2021-1d3698089d-Mailing List, Third Party Advisory
N/A-Third Party Advisory

Keywords

CVE-2021-28041

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-28041

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures