CVE-2015-6564 in OpenSSH
Zusammenfassung (Englisch)
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in Platform before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
Reservieren
21.08.2015
Veröffentlichung
23.08.2015
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 77397 | OpenSSH monitor.c mm_answer_pam_free_ctx erweiterte Rechte | 264 | Unbewiesen | Offizieller Fix | CVE-2015-6564 |