ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
[
{
"id": "CVE-2021-28041-54d2e7a4",
"deprecated": false,
"digest": {
"length": 1924.0,
"function_hash": "173721609678640022569229149022258778798"
},
"target": {
"file": "ssh-agent.c",
"function": "parse_key_constraints"
},
"source": "https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-28041-cc2d2809",
"deprecated": false,
"digest": {
"line_hashes": [
"324971150381275214664383765392462492057",
"35905711137950555800092955147616975381",
"280800082751440415410409700843773412685",
"318550751993613194314048368639682994639",
"23868655624994298100487727056333202425",
"244436830645919759774327638059848338439",
"138698284080572836105280785656899991409",
"9033034855088479321430157709782700466",
"22142238223153571879023637285005129557",
"315858932437975382361183511281580444358",
"130557074698110042526433579895989775636",
"7204549947729823870957182181547536953",
"12905892664167437594451645232613297006",
"251529289733491831195606371359111162841",
"177830966528718040299332634458005032145",
"300704592333704606881024397315264096894",
"68152159178091995237554110289214196491",
"42494124541627447269898043180593590915",
"320556485030812218659014383741631871437",
"45773691422799354331400538358277572791",
"335506426304232459784018911527655716968",
"27372044304831879860737029270393640383",
"11763002217097802034849258435513820168",
"179353741159705671161838348933242658738",
"132689354122742414813436913087274689603",
"276709306755959814709495100166592554722",
"201316834310946316723168081310699223421",
"31057859855805322736544100297993687144",
"67458982881632147371297786351558915464",
"210119245347920818543600782909998763594",
"298580235221410405037933958555305990514",
"230867662602832817172801273969801275237",
"257317866508291513551827951352472141289",
"156807975548369884606722121595578079334",
"217533324983926179349196893136226159663",
"228052322752471493904247006065340830411",
"19343026518483286429571420720135249122",
"52740631499272546572241872874122645700",
"293545585449308818808614482901873786474",
"213973480703754722932643826614376146315",
"205809471667994677532772237759843236565",
"185771526080875152586087482394292594138",
"68582630296210109857337873522774019276",
"317829200174240480595834472274198551587",
"25969414358095763520215986723486496854",
"305057446643197618251565596522664715218",
"220799416411745608988007735748224964625",
"3737787432264992221489305885454501991",
"5987319637948977260788526897195828862",
"295351319855857503779798914695957240442",
"182628650296767461325031325004207257089",
"5567271653036731993773606933928643760",
"281936189076271707487423718223517656085",
"252971503687169575314980099775864002377",
"312662942297556533828555981998666086405",
"320188348619438627560905104538012183513",
"46318002341445417061280095446445292710",
"228488892499046990093112581310345343536",
"266224181901350862297255464861723612262",
"139876278825664430322184869733137169697",
"75254383951828371494544163797067708531",
"105137070746241836500261971050361345422",
"27021730741084737657888832983194732839",
"329775737164426552044250829181369536038",
"291980543041481269177220703457798473613",
"335550709427082525744292039239532841257",
"197956281668168479602287881718216497682",
"275305622603090741574960876279052419595",
"142801784165815353799613356095685606474",
"112652594150436027541652195151470919916",
"175896571450895747164708549567741093168",
"39725264024330242304658532467622498290",
"62229998599115727890169580349558021065",
"261950695957889776154455739945391283946",
"38473914387751692624208705528354576224",
"205494285796625171649268972624455690184",
"24906064940423552919215091837724729278",
"37315012930265623375129898211640829232",
"461858003746993622093163016771701652",
"154218190964193173632405916855073315430",
"274369461503223323845070479388222163445",
"267868390585593816517915983992887850017",
"320442894666120266923014174087720628845",
"278189631706181824681136260371129073784"
],
"threshold": 0.9
},
"target": {
"file": "ssh-agent.c"
},
"source": "https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db",
"signature_type": "Line",
"signature_version": "v1"
}
]