Threats tagged 'ghsa-jwc3-6qvm-4r66'

A use-after-free vulnerability exists in OpenSSH versions before 10.5, triggered by concurrent remote-forwarding operations. This flaw can cause memory corruption due to improper handling of realloc data. The vulnerability affects multiple OpenSSH versions including Microsoft Azure Linux 3.0. The severity is assessed as medium with a CVSS score of 4.8. A patch is available to address this issue.