SUSE-SU-2018:3311-1
Security update for pam_pkcs11
No scoreFix available
This update for pam_pkcs11 provides the following fixes:
Security issues fixed (bsc#1105012):
- Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability
- Fixed a stack-based buffer overflow in opensshmapper.c
- Make sure memory is properly cleaned before invoking free()
Other changes:
- Add a systemd service file. (bsc#1049219)
What each source reports
OSVNo score
Security update for pam_pkcs11
This update for pam_pkcs11 provides the following fixes:
Security issues fixed (bsc#1105012):
- Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability
- Fixed a stack-based buffer overflow in opensshmapper.c
- Make sure memory is properly cleaned before invoking free()
Other changes:
- Add a systemd service file. (bsc#1049219)
- Record
SUSE-SU-2018:3311-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pam_pkcs11SUSE:Linux Enterprise Desktop 12 SP3 | before 0.6.8-7.5.1 | 0.6.8-7.5.1 |
pam_pkcs11SUSE:Linux Enterprise Server 12 SP3 | before 0.6.8-7.5.1 | 0.6.8-7.5.1 |
pam_pkcs11SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 0.6.8-7.5.1 | 0.6.8-7.5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2018:3311-1 is a vulnerability with no CVSS score yet in pam_pkcs11, published October 23, 2018. No source lists public exploit code. Fixed in pam_pkcs11 0.6.8-7.5.1.