Lucene search
Ubuntu.comUB:CVE-2021-28041HistoryMar 05, 2021 - 12:00 a.m.
CVE-2021-28041
2021-03-0500:00:00
ubuntu.com
ubuntu.com
268
0.002 Low
EPSS
Percentile
55.6%
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a
few less-common scenarios, such as unconstrained agent-socket access on a
legacy operating system, or the forwarding of an agent to an
attacker-controlled host.
Notes
| Author | Note |
|---|---|
| seth-arnold | openssh-ssh1 is provided for compatibility with old devices that cannot be upgraded to modern protocols. Thus we may not provide security support for this package if doing so would prevent access to equipment. |
References
launchpad.net/bugs/cve/CVE-2021-28041
nvd.nist.gov/vuln/detail/CVE-2021-28041
security-tracker.debian.org/tracker/CVE-2021-28041
ubuntu.com/security/notices/USN-4762-1
www.cve.org/CVERecord?id=CVE-2021-28041
www.openssh.com/security.html
www.openssh.com/txt/release-8.5
www.openwall.com/lists/oss-security/2021/03/03/1
Related
fedora
fedora
[SECURITY] Fedora 34 Update: kde-settings-34.0-9.fc34
2021-03-23 00:18:07
[SECURITY] Fedora 33 Update: openssh-8.4p1-7.fc33
2021-06-26 01:08:17
[SECURITY] Fedora 34 Update: openssh-8.5p1-2.fc34
2021-03-23 00:18:07
osv
osv
CVE-2021-28041
2021-03-05 21:15:13
nessus
nessus
EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1934)
2021-06-03 00:00:00
FreeBSD : OpenSSH -- Double-free memory corruption in ssh-agent (76b5068c-8436-11eb-9469-080027f515ea)
2021-03-19 00:00:00
OpenSSH 8.2 < 8.5
2021-03-11 00:00:00
archlinux
archlinux
[ASA-202103-6] openssh: arbitrary code execution
2021-03-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-1955)
2021-06-07 00:00:00
Ubuntu: Security Advisory (USN-4762-1)
2021-03-11 00:00:00
Fedora: Security Advisory for openssh (FEDORA-2021-1d3698089d)
2021-06-28 00:00:00
redhatcve
redhatcve
CVE-2021-28041
2021-03-09 15:34:20
mageia
mageia
Updated openssh packages fix a security vulnerability
2021-06-16 23:22:25
cvelist
cvelist
CVE-2021-28041
2021-03-05 19:07:34
f5
f5
K14756743 : OpenSSH vulnerability CVE-2021-28041
2021-04-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-03-24 17:11:09
prion
prion
Double free
2021-03-05 21:15:00
cve
cve
CVE-2021-28041
2021-03-05 21:15:13
alpinelinux
alpinelinux
CVE-2021-28041
2021-03-05 21:15:13
paloalto
paloalto
PAN-OS: Informational: Impact of the OpenSSH vulnerability CVE-2021-28041
2021-03-24 20:50:00
debiancve
debiancve
CVE-2021-28041
2021-03-05 21:15:13
cbl_mariner
cbl_mariner
CVE-2021-28041 affecting package openssh 8.0p1-13
2021-03-13 20:37:12
freebsd
freebsd
OpenSSH -- Double-free memory corruption in ssh-agent
2021-03-03 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2021-05-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0033
2021-05-26 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0033
2021-05-27 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00