CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28041

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.9%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 4.6

References

Products affected by CVE-2021-28041

Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Openbsd » Openssh » Version: 8.2

cpe:2.3:a:openbsd:openssh:8.2
Openbsd » Openssh » Version: 8.3

cpe:2.3:a:openbsd:openssh:8.3
Openbsd » Openssh » Version: 8.4

cpe:2.3:a:openbsd:openssh:8.4
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0
Netapp » Hci Compute Node » Version: N/A

cpe:2.3:h:netapp:hci_compute_node:-
Netapp » Hci Storage Node » Version: N/A

cpe:2.3:h:netapp:hci_storage_node:-
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Netapp » Hci Compute Node Firmware » Version: N/A

cpe:2.3:o:netapp:hci_compute_node_firmware:-
Netapp » Hci Storage Node Firmware » Version: N/A

cpe:2.3:o:netapp:hci_storage_node_firmware:-
Oracle » Zfs Storage Appliance » Version: 8.8

cpe:2.3:o:oracle:zfs_storage_appliance:8.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28041

Products

Pricing

Contact Us