CVE-2012-5536

CVE-2012-5536 affects OpenSSH via the pam_ssh_agent_auth module on RHEL6 and Fedora Rawhide. The root cause is calling glibc’s error() instead of OpenSSH’s error() within pam_ssh_agent_auth, enabling local users to potentially disclose sensitive process-memory data or gain privileges (demonstrate...