vulnerability

OpenSSH Vulnerability: CVE-2021-28041

Severity
5
CVSS
(AV:N/AC:H/Au:S/C:P/I:P/A:P)
Published
Mar 5, 2021
Added
Mar 11, 2021
Modified
Mar 19, 2021

Description

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

Solution

openbsd-openssh-upgrade-8_5
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.