{"id":"SUSE-SU-2018:3311-1","aliases":[],"status":"published","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 provides the following fixes:\n\nSecurity issues fixed (bsc#1105012):\n\n- Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability\n- Fixed a stack-based buffer overflow in opensshmapper.c\n- Make sure memory is properly cleaned before invoking free()\n\nOther changes:\n\n- Add a systemd service file. (bsc#1049219)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-10-23T07:34:45Z","modified":"2018-10-23T07:34:45Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"pam_pkcs11","fixed_in":["0.6.8-7.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"pam_pkcs11","fixed_in":["0.6.8-7.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"pam_pkcs11","fixed_in":["0.6.8-7.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.8-7.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.8-7.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"pam_pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.8-7.5.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183311-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049219","tags":["report"]},{"url":"https://bugzilla.suse.com/1105012","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2018:3311-1","title":"Security update for pam_pkcs11","description":"This update for pam_pkcs11 provides the following fixes:\n\nSecurity issues fixed (bsc#1105012):\n\n- Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability\n- Fixed a stack-based buffer overflow in opensshmapper.c\n- Make sure memory is properly cleaned before invoking free()\n\nOther changes:\n\n- Add a systemd service file. (bsc#1049219)\n","status":"published","published":"2018-10-23T07:34:45Z","modified":"2018-10-23T07:34:45Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}