ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
{ "binaries": [ { "binary_name": "openssh-client", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-client-dbgsym", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-client-udeb", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-server", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-server-dbgsym", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-server-udeb", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-sftp-server", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-sftp-server-dbgsym", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-tests", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "openssh-tests-dbgsym", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "ssh", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "ssh-askpass-gnome", "binary_version": "1:8.2p1-4ubuntu0.2" }, { "binary_name": "ssh-askpass-gnome-dbgsym", "binary_version": "1:8.2p1-4ubuntu0.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }