CVE-2015-6564 in OpenSSH
Сводка (Английский)
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in Platform before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
21.08.2015
Раскрытие
23.08.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 77397 | OpenSSH monitor.c mm_answer_pam_free_ctx эскалация привилегий | 264 | недоказанный | Официальное исправление | CVE-2015-6564 |