Every CVE Search/ Get API key

CVE-2025-24031

PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

5.1 Medium

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
None

Exploit likelihood

0.14%Up 0.1 points since Feb 11, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.1

PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
CVE-2025-24031
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2025-3601 5.1

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
EUVD-2025-3601
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L
Updated
2026-11-03
NVD 5.1

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
CVE-2025-24031
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-476
Updated
2026-11-02
OSV 5.1

PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
CVE-2025-24031
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L
Weakness
CWE-476
Updated
2026-11-02
OSVDEBIAN-CVE-2025-24031 5.1

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
DEBIAN-CVE-2025-24031
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2025-24031 5.1

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pam_get_pwd will never initialize the password buffer pointer and as such cleanse will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

Record
UBUNTU-CVE-2025-24031
CVSS 4.0
5.1 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L
Updated
2026-11-02
Show 4 moreShow less
OSVSUSE-SU-2025:0688-1 No score

Security update for pam_pkcs11

This update for pam_pkcs11 fixes the following issues:

  • CVE-2025-24032: default value for cert_policy (none) allows for authentication bypass (bsc#1237062).
  • CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).
Record
SUSE-SU-2025:0688-1
Updated
2026-11-02
OSVSUSE-SU-2025:0689-1 No score

Security update for pam_pkcs11

This update for pam_pkcs11 fixes the following issues:

  • CVE-2025-24032: default value for cert_policy (none) allows for authentication bypass (bsc#1237062).
  • CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).
Record
SUSE-SU-2025:0689-1
Updated
2026-11-02
OSVSUSE-SU-2025:0712-1 No score

Security update for pam_pkcs11

This update for pam_pkcs11 fixes the following issues:

  • CVE-2025-24032: default value for cert_policy (none) allows for authentication bypass (bsc#1237062).
  • CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).
Record
SUSE-SU-2025:0712-1
Updated
2026-11-02
OSVSUSE-SU-2025:20199-1 No score

Security update for pam_pkcs11

This update for pam_pkcs11 fixes the following issues:

  • CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN (bsc#1237058).
  • CVE-2025-24032: Fixed authentication bypass with default value for cert_policy (none) (bsc#1237062).
Record
SUSE-SU-2025:20199-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pam-pkcs11
Debian:12
 All versions, plus listed versions
0.6.12-10.6.12-1+deb12u10.6.12-20.6.13-10.6.13-2
 None known
pam-pkcs11
Debian:13
 All versions, plus listed versions
0.6.13-10.6.13-2
 None known
pam-pkcs11
Debian:14
 All versions, plus listed versions
0.6.13-10.6.13-2
 None known
pam_pkcs11
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 0.6.8-7.8.1
0.6.8-7.8.1
pam_pkcs11
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 0.6.10-150600.16.3.1
0.6.10-150600.16.3.1
pam_pkcs11
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 0.6.10-150600.16.3.1
0.6.10-150600.16.3.1
pam_pkcs11
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 0.6.10-150100.3.6.1
0.6.10-150100.3.6.1
pam_pkcs11
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 0.6.10-150100.3.6.1
0.6.10-150100.3.6.1
pam_pkcs11
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 0.6.10-150100.3.6.1
0.6.10-150100.3.6.1
pam_pkcs11
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 0.6.10-150100.3.6.1
0.6.10-150100.3.6.1
Show 10 moreShow less
Affected packages
PackageAffectedFixed
pam_pkcs11
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 0.6.10-150100.3.6.1
0.6.10-150100.3.6.1
pam_pkcs11
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 0.6.12-3.1
0.6.12-3.1
pam-pkcs11
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.6.8-40.6.8-4ubuntu0.1~esm1
 None known
pam-pkcs11
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.6.9-10.6.9-20.6.9-2build10.6.9-2build20.6.9-2ubuntu0.1~esm1
 None known
pam-pkcs11
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.6.11-20.6.11-2ubuntu0.1
 None known
pam-pkcs11
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.6.11-4build10.6.11-4build20.6.11-4ubuntu0.1
 None known
pam-pkcs11
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.6.12-10.6.12-20.6.12-2build20.6.12-2build30.6.12-2ubuntu0.24.04.1
 None known
pam-pkcs11
Ubuntu:25.10
 All versions, plus listed versions
0.6.13-1
 None known
pam-pkcs11
Ubuntu:26.10
 All versions, plus listed versions
0.6.13-1build10.6.13-20.6.13-2ubuntu1
 None known
pam-pkcs11
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.6.13-10.6.13-1build1
 None known

History

History
RecordedChangedSources
affected, facts
aliases, products, publishedEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-24031 is a medium vulnerability (CVSS 5.1) in Opensc Pam Pkcs11, published February 10, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open