Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2012-5536 Details

Description

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://pkgs.fedoraproject.org/cgit/openssh.git/commit/?id=4f4687ce8045418f678c323bb22c837f35d7b9fa CVEExploitPatch
http://rhn.redhat.com/errata/RHSA-2013-0519.html CVE
https://bugzilla.redhat.com/show_bug.cgi?id=834618 CVE
http://pkgs.fedoraproject.org/cgit/openssh.git/commit/?id=4f4687ce8045418f678c323bb22c837f35d7b9fa [email protected]ExploitPatch
http://rhn.redhat.com/errata/RHSA-2013-0519.html [email protected]

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]

Affected Products

ProductVersions
fedora project fedora release rawhide
All versions

CPE

  • cpe:2.3:o:fedora_project:fedora_release_rawhide:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
redhat enterprise linux
6.0

CPE

  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2012-5536
NVD Published Date:
Feb 22, 2013
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2012-5536 Details - Not Deferred