Vulnerability Details : CVE-2015-6564

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
Published 2015-08-24 01:59:02
Updated 2025-04-12 10:46:41
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Memory Corruption

Products affected by CVE-2015-6564

Threat overview for CVE-2015-6564

Top countries where our scanners detected CVE-2015-6564
Top open port discovered on systems with this issue 22
IPs affected by CVE-2015-6564 2,728,724
Threat actors abusing to this issue? Yes
Find out if you* are affected by CVE-2015-6564!
*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2015-6564

EPSS FAQ
2.27%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6564

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
6.9
 MEDIUM AV:L/AC:M/Au:N/C:C/I:C/A:C
3.4
10.0
 NIST

CWE ids for CVE-2015-6564

  • Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-6564

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close