CVE:CVE-2021-28041
CNNVD:CNNVD-202103-527
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。
OpenSSH 8.5 版本之前存在资源管理错误漏洞，攻击者可利用该漏洞在遗留操作系统上不受约束的代理套接字访问。
solution:Upgrade openbsd openssh to a higher version than 8.5,and avoid the version [8.2,8.5); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade netapp hci_storage_node_firmware to a higher version than -; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle zfs_storage_appliance to a higher version than 8.8,and avoid the version 8.8