CVE-2015-6564

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

Affected products

Alt Linux, Centos, Ibm Aix, Openssh, Red Hat, Suse

Openbsd Openssh

≤ 6.9

Fix

Available

CVSS 3.1

7.0 HIGH

EPSS

0.6% (46th percentile)

Weakness

CWE-416, CWE-264

NVD status

Modified

Published

2015-08-24