CVE-2021-28041 Use after free in n/a
A double free vulnerability in OpenSSH ssh-agent allows attackers to cause denial of service or execute code under specific legacy or forwarded agent conditions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-28041?
CVE-2021-28041 is a high-severity use after free vulnerability in Fedoraproject Fedora, published on 5 Mar 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Weakness: CWE-415
Which versions are affected by CVE-2021-28041?
It affects 9 products.
Linux distribution packages (6)
openssh SUSE:Linux Enterprise Micro 5.1 | All versions | 8.4p1-3.9.1 |
openssh SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 8.4p1-3.9.1 |
openssh-askpass-gnome SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 | All versions | 8.4p1-3.9.1 |
openssh SUSE:Linux Enterprise Module for Server Applications 15 SP3 | All versions | 8.4p1-3.9.1 |
openssh openSUSE:Leap 15.3 | All versions | 8.4p1-3.9.1 |
openssh-askpass-gnome openSUSE:Leap 15.3 | All versions | 8.4p1-3.9.1 |
Products include Fedoraproject Fedora, Netapp Cloud Backup, Netapp Hci Compute Node Firmware, Netapp Hci Management Node, Netapp Hci Storage Node Firmware, Netapp Solidfire and 3 more.
How do I fix CVE-2021-28041?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2021-28041 being exploited?
There is no known exploitation of CVE-2021-28041 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2021-28041, DEBIAN-CVE-2021-28041, GHSA-gp5m-rxrx-pfrj, JLSEC-2026-64, MGASA-2021-0261, OESA-2021-1466 and 5 more.