Security Advisory

CVE-2021-28041

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-05 19:07:34
Last updated 2024-08-03 21:33:17
Assigner mitre
State PUBLISHED

Description

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.