{"id":"CVE-2024-10963","aliases":["ALSA-2024:10244","ALSA-2024:10379","AZL-52539","BELL-CVE-2024-10963","CLSA-2024-1733245591","CLSA-2024-1735300164","DEBIAN-CVE-2024-10963","EUVD-2024-33602","GHSA-rw99-6hrh-fmjr","OESA-2024-2501","RHSA-2024:10232","RHSA-2024:10244","RHSA-2024:10379","RLSA-2024:10244","RLSA-2024:10379","SUSE-SU-2025:20104-1","SUSE-SU-2025:20229-1","UBUNTU-CVE-2024-10963","USN-7761-1","openSUSE-SU-2024:14563-1"],"status":"published","title":"Pam: improper hostname interpretation in pam_access leads to access control bypass","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00781,"percentile":0.56401,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2024-11-07T16:02:34Z","modified":"2026-11-05T21:15:46Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"pam","fixed_in":["1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-devel","fixed_in":["1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-docs","fixed_in":["1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"pam","fixed_in":["1.5.3-4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"pam","fixed_in":["1.3.1-33.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"pam-devel","fixed_in":["1.3.1-33.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","fixed_in":["1.5.1-14.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","fixed_in":["1.5.1-14.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","fixed_in":["1.5.1-14.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pam","fixed_in":["1.7.0-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pam","fixed_in":["1.7.0-5"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"pam","fixed_in":["1.5.2-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"pam","fixed_in":["1.5.3-5.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"pam","fixed_in":["1.5.2-9.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","fixed_in":["1.5.2-9.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","fixed_in":["1.4.0-12.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-devel","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-docs","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-23.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"pam","fixed_in":["0:1.5.1-22.el9_5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"pam","fixed_in":["1.6.0-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"pam","fixed_in":["1.6.1-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"pam","fixed_in":["1.5.3-5ubuntu5.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pam","fixed_in":["1.7.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.3-r3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-5"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-9.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-9.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-12.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-23.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-22.el9_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-36.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5ubuntu5.5"}]}],"versions":["1.5.2-6ubuntu1","1.5.2-9.1ubuntu1","1.5.2-9.1ubuntu2","1.5.2-9.1ubuntu3","1.5.3-5ubuntu3","1.5.3-5ubuntu4","1.5.3-5ubuntu5","1.5.3-5ubuntu5.1","1.5.3-5ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5ubuntu5.5"}]}],"versions":["1.5.2-6ubuntu1","1.5.2-9.1ubuntu1","1.5.2-9.1ubuntu2","1.5.2-9.1ubuntu3","1.5.3-5ubuntu3","1.5.3-5ubuntu4","1.5.3-5ubuntu5","1.5.3-5ubuntu5.1","1.5.3-5ubuntu5.4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat openshift ai 2.16"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:10232","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10244","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10379","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10518","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10528","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10852","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6122","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-10963","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324291","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/linux-pam/linux-pam/issues/834","tags":["report","article"]},{"url":"https://github.com/linux-pam/linux-pam/pull/835","tags":["fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10963","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rw99-6hrh-fmjr"},{"url":"https://bugzilla.redhat.com/2324291","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-10244.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-10041","tags":["report"]},{"url":"https://bugzilla.redhat.com/2319212","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-10379.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-10963","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1733245591.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1735300164.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/linux-pam/linux-pam/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10963.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-10963","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2501","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10232.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10963","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10244.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319212","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-23018","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10379.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10041","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:10244","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:10379","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520104-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233078","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10963","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520229-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-10963","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7761-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FPNEWJX6P4O6Q76SQV4R46NCDSSTXLFJ/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-10963","title":"Pam: improper hostname interpretation in pam_access leads to access control bypass","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:02:34.873Z","modified":"2026-11-04T21:08:15.888Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2024-33602","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:02:34Z","modified":"2026-11-04T21:08:15Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"ghsa":[{"id":"GHSA-rw99-6hrh-fmjr","title":"A vulnerability was found in pam_access due to the improper handling of tokens in access.conf,...","description":"A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.","status":"published","published":"2024-11-07T18:31:23Z","modified":"2026-08-11T18:31:34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:10:19.387522Z"}],"nvd":[{"id":"CVE-2024-10963","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:15:17.15Z","modified":"2026-11-04T21:17:31.663Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-04T23:43:36.946093Z"}],"osv":[{"id":"BELL-CVE-2024-10963","status":"published","published":"2024-11-08T05:57:34.861705Z","modified":"2026-01-26T09:42:47.916931Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-10963","title":"Pam: improper hostname interpretation in pam_access leads to access control bypass","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:02:34.873Z","modified":"2026-11-05T21:15:46.602820294Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-05T22:01:21.792402Z"},{"id":"DEBIAN-CVE-2024-10963","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:15:17.15Z","modified":"2026-11-05T09:47:33.986569085Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2024-2501","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.(CVE-2024-10963)","status":"published","published":"2024-12-06T11:07:59Z","modified":"2026-08-18T01:18:41.802913904Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:10232","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2024-11-26T08:08:16Z","modified":"2026-10-13T10:06:18Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:10244","title":"Red Hat Security Advisory: pam:1.5.1 security update","status":"published","published":"2024-11-26T08:08:42Z","modified":"2026-10-13T10:06:19Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:10379","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2024-11-26T19:08:40Z","modified":"2026-10-13T10:06:19Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2024-10963","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:15:00Z","modified":"2026-04-22T14:36:20.590065Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:10244","title":"Important: pam:1.5.1 security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-25T00:00:00Z","modified":"2026-10-29T11:31:39.526911683Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:10379","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041)\n  * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-26T00:00:00Z","modified":"2026-10-29T11:02:27.389445333Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-52539","title":"CVE-2024-10963 affecting package pam for versions less than 1.5.3-4","description":"A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.","status":"published","published":"2024-11-07T16:15:17Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.828909Z"},{"id":"CLSA-2024-1733245591","title":"pam: Fix of CVE-2024-10963","description":"- CVE-2024-10963: fix a flaw found in pam_access, where certain rules\n  in its configuration file are mistakenly treated as hostnames. There\n  is the new 'nodns' option which should be enabled to fix the CVE.","status":"published","published":"2024-12-03T17:06:37Z","modified":"2026-06-01T00:32:56.978962806Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1735300164","title":"pam: Fix of CVE-2024-10963","description":"- CVE-2024-10963: pam_access: rework resolving of tokens as hostname","status":"published","published":"2024-12-27T11:49:30Z","modified":"2026-06-01T00:30:27.379660056Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"openSUSE-SU-2024:14563-1","title":"pam-1.7.0-2.1 on GA media","description":"These are all security issues fixed in the pam-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-08T00:00:00Z","modified":"2026-02-04T03:26:51.203321Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2024:10244","title":"Important: pam:1.5.1 security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-04T19:00:07.725276Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:10379","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041)\n\n* pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-12-19T04:17:50.25656Z","modified":"2026-02-04T15:00:05.454819Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2025:20104-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2024-10963: Fixed improper hostname interpretation in pam_access that could lead to access control bypass (bsc#1233078).\n","status":"published","published":"2025-02-03T09:17:47Z","modified":"2026-03-23T04:48:52.95599Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20229-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2024-10963: Fixed improper hostname interpretation inpam_access that could lead to access control bypass (bsc#1233078)\n","status":"published","published":"2025-03-05T14:53:57Z","modified":"2026-03-23T04:50:44.408657Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7761-1","title":"pam vulnerability","description":"It was discovered that the PAM pam_access module incorrectly parsed\ncertain rules as hostnames. An attacker could possibly use this issue to\nspoof hostnames and bypass access restrictions.","status":"published","published":"2025-09-22T14:06:26Z","modified":"2026-04-22T11:02:13.987351Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}