Every CVE Search/ Get API key

CVE-2012-5536

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and...

6.2 MediumFix available

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Exploit likelihood

0.44%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.2

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Record
CVE-2012-5536
CVSS 2.0
6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Record
CVE-2012-5536
Updated
2026-11-02
EUVDEUVD-2012-5428 No score

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Record
EUVD-2012-5428
Updated
2026-11-03
GitHub AdvisoriesGHSA-xw28-c23x-fjj4 No score

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and...

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Record
GHSA-xw28-c23x-fjj4
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-ldap
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::client
 before 0:0.9.3-84.1.el6
0:0.9.3-84.1.el6
openssh-askpass
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-clients
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-server
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-askpass
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
Show 18 moreShow less
Affected packages
PackageAffectedFixed
openssh-ldap
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::computenode
 before 0:0.9.3-84.1.el6
0:0.9.3-84.1.el6
openssh-clients
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-server
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-ldap
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::server
 before 0:0.9.3-84.1.el6
0:0.9.3-84.1.el6
openssh-askpass
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-clients
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-server
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-ldap
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::workstation
 before 0:0.9.3-84.1.el6
0:0.9.3-84.1.el6
openssh-askpass
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-clients
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6
openssh-server
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-84.1.el6
0:5.3p1-84.1.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5536 is a medium vulnerability (CVSS 6.2) in Redhat Enterprise Linux, published February 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in openssh 0:5.3p1-84.1.el6.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open