authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Openssh | Openbsd | * | 7.3 |