CVE-2015-6564: OpenBSD OpenSSH

High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

Affected products

• OpenBSD OpenSSH: up to and including 6.9

Published 2015-08-24. Last modified 2026-06-17.