CVE

Id
83841  
CVE No.
CVE-2015-6564  
Status
Candidate  
Description
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.  
Phase
Assigned (20150821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
745087 83841 CVE-2015-6564 FULLDISC:20150813 BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities  View
745088 83841 CVE-2015-6564 URL:http://seclists.org/fulldisclosure/2015/Aug/54  View
745089 83841 CVE-2015-6564 MLIST:[oss-security] 20150821 Re: CVE request - OpenSSH 6.9 PAM privilege separation vulnerabilities  View
745090 83841 CVE-2015-6564 URL:http://www.openwall.com/lists/oss-security/2015/08/22/1  View
745091 83841 CVE-2015-6564 CONFIRM:http://www.openssh.com/txt/release-7.0  View
745092 83841 CVE-2015-6564 CONFIRM:https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7  View
745093 83841 CVE-2015-6564 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
745094 83841 CVE-2015-6564 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
745095 83841 CVE-2015-6564 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
745096 83841 CVE-2015-6564 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10136  View
745097 83841 CVE-2015-6564 FEDORA:FEDORA-2015-13469  View
745098 83841 CVE-2015-6564 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html  View
745099 83841 CVE-2015-6564 GENTOO:GLSA-201512-04  View
745100 83841 CVE-2015-6564 URL:https://security.gentoo.org/glsa/201512-04  View
745101 83841 CVE-2015-6564 SUSE:SUSE-SU-2015:1581  View
745102 83841 CVE-2015-6564 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html  View
745103 83841 CVE-2015-6564 BID:76317  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10882 JVNDB-2015-006202 Android のメディアサーバにおける任意のコードを実行される脆弱性 Android のメディアサーバには、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-6616 83841 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006202.html  View