OpenSSH -- Double-free memory corruption in ssh-agententered 2021-03-13
no CVE referenced
CVE details
CVE-2021-28041
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
- Score
- 7.1 high
- Published
- 2021-03-05
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.