Catalogo CVE
CVE-2021-28041
openssh: CVE-2021-28041
- Gravità
- High · CVSS 7.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 3.51% · Oct 22, 2026
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssh | sid | 1:10.6p1-1 | fixed |
| Debian | openssh | forky | 1:10.6p1-1 | fixed |
| Debian | openssh | trixie | 1:10.0p1-7+deb13u4 | fixed |
| Debian | openssh | trixie-security | 1:10.0p1-7+deb13u2 | fixed |
| Debian | openssh | bookworm | 1:9.2p1-2+deb12u10 | fixed |
| Debian | openssh | bookworm-security | 1:9.2p1-2+deb12u9 | fixed |
| Cpe | openssh | Not reported | 8.5 | fixed |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | cloud_backup | Not reported | Not reported | unknown |
| Cpe | hci_management_node | Not reported | Not reported | unknown |
| Cpe | solidfire | Not reported | Not reported | unknown |
| Cpe | hci_compute_node_firmware | Not reported | Not reported | unknown |
| Cpe | hci_storage_node_firmware | Not reported | Not reported | unknown |
| Cpe | communications_offline_mediation_controller | Not reported | Not reported | unknown |
| Cpe | zfs_storage_appliance | Not reported | Not reported | unknown |
| Alpine | openssh | 3.12 | 8.3_p1-r2 | fixed |
| Alpine | openssh | 3.13 | 8.4_p1-r1 | fixed |
| Alpine | openssh | 3.14 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.15 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.16 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.17 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.18 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.19 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.20 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.21 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.22 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.23 | 8.5_p1-r0 | fixed |
| Alpine | openssh | 3.24 | 8.5_p1-r0 | fixed |
| Ubuntu | openssh | 20.04 | 1:8.0p1-6build1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.1p1-1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.1p1-5 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4ubuntu0.1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4ubuntu0.2 | fixed |
| Suse | openssh | linux enterprise module for basesystem 15 sp3 | 8.4p1-3.9.1 | fixed |
| Suse | openssh-askpass-gnome | linux enterprise module for desktop applications 15 sp3 | 8.4p1-3.9.1 | fixed |
| Suse | openssh | linux enterprise module for server applications 15 sp3 | 8.4p1-3.9.1 | fixed |
| Suse | openssh | linux enterprise micro 5.1 | 8.4p1-3.9.1 | fixed |
| Ubuntu | openssh | 20.04 | 1:8.0p1-6build1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.1p1-1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.1p1-5 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4ubuntu0.1 | vulnerable |
| Ubuntu | openssh | 20.04 | 1:8.2p1-4ubuntu0.2 | fixed |
| Opensuse | openssh | leap 15.3 | 8.4p1-3.9.1 | fixed |
| Opensuse | openssh-askpass-gnome | leap 15.3 | 8.4p1-3.9.1 | fixed |
| Opensuse | openssh | tumbleweed | 9.6p1-3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssh | source | sid | 1:8.4p1-5 | not yet assigned | Not reported | [984940] |
| Debian | openssh | source | forky | 1:8.4p1-5 | not yet assigned | Not reported | [984940] |
| Debian | openssh | source | trixie | 1:8.4p1-5 | not yet assigned | Not reported | [984940] |
| Debian | openssh | source | bookworm | 1:8.4p1-5 | not yet assigned | Not reported | [984940] |
| Cpe | openssh | cpe | Not reported | 8.5 | Not reported | NVD-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.12 | 8.3_p1-r2 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.13 | 8.4_p1-r1 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.14 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.15 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.16 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.17 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.18 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.19 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.20 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.21 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.22 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.23 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Alpine | openssh | apk | 3.24 | 8.5_p1-r0 | Not reported | ALPINE-CVE-2021-28041 | Not reported |
| Ubuntu | openssh | deb | 20.04 | 1:8.2p1-4ubuntu0.2 | Not reported | USN-4762-1 | Not reported |
| Suse | openssh | rpm | linux enterprise module for basesystem 15 sp3 | 8.4p1-3.9.1 | Not reported | SUSE-SU-2021:4153-1 | Not reported |
| Suse | openssh-askpass-gnome | rpm | linux enterprise module for desktop applications 15 sp3 | 8.4p1-3.9.1 | Not reported | SUSE-SU-2021:4153-1 | Not reported |
| Suse | openssh | rpm | linux enterprise module for server applications 15 sp3 | 8.4p1-3.9.1 | Not reported | SUSE-SU-2021:4153-1 | Not reported |
| Suse | openssh | rpm | linux enterprise micro 5.1 | 8.4p1-3.9.1 | Not reported | SUSE-SU-2021:4153-1 | Not reported |
| Ubuntu | openssh | deb | 20.04 | 1:8.2p1-4ubuntu0.2 | Not reported | UBUNTU-CVE-2021-28041 | Not reported |
| Opensuse | openssh | rpm | leap 15.3 | 8.4p1-3.9.1 | Not reported | OPENSUSE-SU-2021:4153-1 | Not reported |
| Opensuse | openssh-askpass-gnome | rpm | leap 15.3 | 8.4p1-3.9.1 | Not reported | OPENSUSE-SU-2021:4153-1 | Not reported |
| Opensuse | openssh | rpm | tumbleweed | 9.6p1-3.1 | Not reported | OPENSUSE-SU-2024:13842-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [openssh-cavs]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh-clients]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh-common]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh-helpers]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh-server]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh-server-config-rootlogin]Sconosciuto
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedSconosciuto · Corretta:
9.6p1-3.1Version impact unknown
dsa · openssh · opensuse · tumbleweed
- [openssh]Corretta
Pacchetto sorgente: [openssh]
Dettagli (1)
10.5p1-1.1· x86_64 · tumbleweedCorretta · Corretta:
9.6p1-3.1dsa · openssh · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [openssh-client]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· amd64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· arm64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· amd64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· arm64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· amd64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· arm64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· amd64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· arm64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [openssh-client-gssapi]Corretta
Pacchetto sorgente: [openssh]
Dettagli (2)
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [openssh-server]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· amd64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· arm64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· amd64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· arm64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· amd64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· arm64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· amd64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· arm64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [openssh-server-gssapi]Corretta
Pacchetto sorgente: [openssh]
Dettagli (2)
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [openssh-sftp-server]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· amd64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· arm64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· amd64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· arm64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· amd64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· arm64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· amd64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· arm64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [openssh-tests]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· amd64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· arm64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· amd64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· arm64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· amd64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· arm64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· amd64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· arm64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [ssh]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· all · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· all · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· all · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· all · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· all · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· all · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· all · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
- [ssh-askpass-gnome]Corretta
Pacchetto sorgente: [openssh]
Dettagli (8)
1:9.2p1-2+deb12u10· amd64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u10· arm64 · bookwormCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· amd64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:10.0p1-7~bpo12+1· arm64 · bookworm-backportsCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· amd64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u9· arm64 · bookworm-securityCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· amd64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
1:9.2p1-2+deb12u7· arm64 · bookworm-updatesCorretta · Corretta:
1:8.4p1-5dsa · openssh · debian · bookworm
Osservato:
Riferimenti
- [https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2021-28041]
- [https://osv.dev/vulnerability/ALPINE-CVE-2021-28041]
- [https://osv.dev/vulnerability/SUSE-SU-2021:4153-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2021-28041]
- [https://osv.dev/vulnerability/USN-4762-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:4153-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13842-1]
- [https://security-tracker.debian.org/tracker/CVE-2021-28041]
- [https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-0997.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]