{"id":"SUSE-SU-2018:2843-1","aliases":[],"status":"published","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following security issues:\n\n- It was possible to replay an authentication by using a specially prepared smartcard or token (bsc#1105012)\n- Prevent buffer overflow if a user has a home directory with a length of more than 512 bytes (bsc#1105012)\n- Memory not cleaned properly before free() (bsc#1105012)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-09-24T16:00:31Z","modified":"2018-09-24T16:00:31Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"pam_pkcs11","fixed_in":["0.6.0-141.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"pam_pkcs11","fixed_in":["0.6.0-141.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-141.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-141.3.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182843-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1105012","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2018:2843-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 fixes the following security issues:\n\n- It was possible to replay an authentication by using a specially prepared smartcard or token (bsc#1105012)\n- Prevent buffer overflow if a user has a home directory with a length of more than 512 bytes (bsc#1105012)\n- Memory not cleaned properly before free() (bsc#1105012)\n","status":"published","published":"2018-09-24T16:00:31Z","modified":"2018-09-24T16:00:31Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}