CVE-2021-28041

概要

参考情報

• openssh/openssh-portable commit e04fd6d · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQWGII3LQR4AOTPPFXGMTYE7UDEWIUKI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXST2CML2MWY3PNVUXX7FFJE3ATJMNVZ
• security.gentoo.org/glsa/202105-35 · Third Party Advisory
• security.netapp.com/advisory/ntap-20210416-0002 · Third Party Advisory
• openssh.com/security.html · Not Applicable
• openssh.com/txt/release-8.5 · Release Notes
• openwall.com/lists/oss-security/2021/03/03/1 · Mailing List
• oracle.com//security-alerts/cpujul2021.html · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html

openssh のその他の脆弱性

• CVE-2026-106583高 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587低 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586中 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585中 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584低 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…