NVD

Id
27446  
Name
CVE-2015-6564  
Description
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-23  
Modified Date
2016-12-21  
Seq
2015-6564  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
144154 27446 CVE-2015-6564 FEDORA-2015-13469  View
144155 27446 CVE-2015-6564 SUSE-SU-2015:1581  View
144156 27446 CVE-2015-6564 20150813 BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities  View
144157 27446 CVE-2015-6564 http://www.openssh.com/txt/release-7.0  View
144158 27446 CVE-2015-6564 [oss-security] 20150821 Re: CVE request - OpenSSH 6.9 PAM privilege separation vulnerabilities  View
144159 27446 CVE-2015-6564 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
144160 27446 CVE-2015-6564 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
144161 27446 CVE-2015-6564 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
144162 27446 CVE-2015-6564 76317  View
144163 27446 CVE-2015-6564 https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7  View
144164 27446 CVE-2015-6564 https://kc.mcafee.com/corporate/index?page=content&id=SB10136  View
144165 27446 CVE-2015-6564 GLSA-201512-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9140 JVNDB-2015-004460 OpenBSD 以外のプラットフォーム上で稼動する OpenSSH の sshd の monitor.c 内の mm_answer_pam_free_ctx 関数における権限を取得される脆弱性 OpenBSD 以外のプラットフォーム上で稼動する OpenSSH の sshd の monitor.c 内の mm_answer_pam_free_ctx 関数には、解放済みメモリの使用 (Use-after-free) により、権限を取得される脆弱性が存在します。 CVE-2015-6564 83789 CVE-2015-6564 27446 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004460.html 2015-08-11 2015-08-28 View