MGASA-2015-0321
Updated openssh packages fix security vulnerabilities
Privilege seaparation weakness related to PAM support allowing the attacker to impersonate other users was found in openssh package. Attackers who could successfully compromise the pre-authentication process for remote code execution and who had valid credentials on the host could impersonate other users (rhbz#1252844).
Use-after-free bug was found in openssh package. The vulnerability is exploitable by attackers who could compromise the pre-authentication process for remote code execution (rhbz#1252852).
What each source reports
OSV No score
Updated openssh packages fix security vulnerabilities
Privilege seaparation weakness related to PAM support allowing the attacker to impersonate other users was found in openssh package. Attackers who could successfully compromise the pre-authentication process for remote code execution and who had valid credentials on the host could impersonate other users (rhbz#1252844).
Use-after-free bug was found in openssh package. The vulnerability is exploitable by attackers who could compromise the pre-authentication process for remote code execution (rhbz#1252852).
- Record
MGASA-2015-0321- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0321 is a vulnerability with no CVSS score yet in openssh, published August 21, 2015. No source lists public exploit code. Fixed in openssh 6.2p2-3.6.mga4.