CVE-2021-28041
High
Published: 05 March 2021
Published
05 March 2021
Modified
21 November 2024
KEV Added
—
Patch
03 March 2021
CVSS Score v3.1
7.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.0026
49.3th percentile
Risk Priority
14
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-28041 is a high-severity Double Free (CWE-415) vulnerability in Fedoraproject Fedora. Its CVSS base score is 7.1 (High).
Operationally, ranked at the 49.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-14748
Vulnerability details
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
openbsd
openssh
8.2 — 8.5
fedoraproject
fedora
33, 34
netapp
cloud backup
all versions
netapp
hci management node
all versions
netapp
solidfire
all versions
netapp
hci compute node firmware
all versions
netapp
hci storage node firmware
all versions
oracle
communications offline mediation controller
12.0.0.3.0
oracle
zfs storage appliance
8.8
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.