Wind River Support Network


LIN6-10270 : Security Advisory - openssh - CVE-2015-6564

Created: Aug 30, 2015    Updated: Dec 3, 2018
Resolved Date: Sep 15, 2015
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

Other Downloads

Live chat