CVE-2021-28041

Description

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

Risk Information

Base Score

7.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.24

Associated Vulnerability

Vulnerability	OS Platform
secure shell (SSH) for secure access to remote machines (USN-4762-1) openssh-client_8.2p1-4ubuntu0.2_i386.deb	Linux
secure shell (SSH) for secure access to remote machines (USN-4762-1) openssh-client_8.2p1-4ubuntu0.2_amd64.deb	Linux
secure shell (SSH) for secure access to remote machines (USN-4762-1) openssh-client_8.3p1-1ubuntu0.1_i386.deb	Linux
secure shell (SSH) for secure access to remote machines (USN-4762-1) openssh-client_8.3p1-1ubuntu0.1_amd64.deb	Linux
Double Free Vulnerability (CVE-2021-28041)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234