Servers and applications
CVE-2021-28041
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
- Severity
- High 7.1
- Published
- 5 Mar 2021
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 8.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
OpenSSHServers and applications · cpe:a:openbsd:openssh |
|