Double Free in Netapp Cloud_backup
CVE-2021-28041
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Vulnerability class: Double Free
EPSS: 0.034 (87.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Netapp Cloud_backup
- Netapp Hci_compute_node
- Netapp Hci_compute_node_firmware
- Netapp Hci_management_node
- Netapp Hci_storage_node
- Netapp Hci_storage_node_firmware
- Netapp Solidfire
- Openbsd Openssh
- Oracle Communications_offline_mediation_controller — versions 12.0.0.3.0
- Oracle Zfs_storage_appliance — versions 8.8
Weakness classification (CWE)
Public proof-of-concept exploits
- ARPSyndicate/cvemon
- MaulikxLakhani/SSHScout
- OhDamnn/Noregressh
- Totes5706/TotesHTB
- accalina/crowflag
- alvarigno/ChocolateFire-DockerLab
- alvarigno22/ChocolateFire-DockerLab
- austin-lai/External-Penetration-Testing-Holo-Corporate-Network-TryHackMe-Holo-Network
- krlabs/openssh-vulnerabilities
- nmuhammad22/UPennFinalProject
References
- cve@mitre.org (x_refsource_MISC, Not Applicable, Vendor Advisory)
- cve@mitre.org (Patch, Mailing List, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2021-28041?
- CVE-2021-28041 is a high-severity vulnerability in Netapp Cloud_backup, classified under Double Free. CVSS score: 7.1/10. Published 2021-03-05.
- How severe is CVE-2021-28041?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2021-28041 known to be exploited?
- 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.