Linux-pam vulnerabilities

Products

• Linux-pam 19

Newest

• linux-pam Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison CVE-2026-54411 Fix available 6.9 MediumJune 14, 2026
• linux-pam, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Pam: libpam: libpam vulnerable to read hashed password CVE-2024-10041 Fix available 4.7 MediumOctober 23, 2024
• linux-pam, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +10 more +12 more linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked... CVE-2024-22365 Fix available 5.5 MediumJanuary 17, 2024
• linux-pam, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for... CVE-2022-28321 Fix available 9.8 CriticalSeptember 19, 2022
• linux-pam, suse pam +1 more A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for... CVE-2020-27780 Fix available 9.8 CriticalDecember 17, 2020
• linux-pam, oracle sparc-opl service processor +1 more The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1,... CVE-2015-3238 Fix available 6.5 MediumJuly 5, 2015
• linux-pam Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for... CVE-2014-2583 Fix available 5.8 MediumApril 10, 2014
• linux-pam The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam)... CVE-2011-3149 Fix available 2.1 LowOctober 24, 2011
• linux-pam Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux... CVE-2011-3148 Fix available 4.6 MediumOctober 24, 2011
• linux-pam The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a... CVE-2010-4708 Fix available 7.2 HighJanuary 24, 2011
• linux-pam The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and... CVE-2010-4707 Fix available 4.9 MediumJanuary 24, 2011
• linux-pam The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1... CVE-2010-4706 Fix available 4.9 MediumJanuary 24, 2011
• linux-pam pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the... CVE-2010-3853 Fix available 6.9 MediumJanuary 24, 2011
• linux-pam The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges... CVE-2010-3435 Fix available 4.7 MediumJanuary 24, 2011
• linux-pam The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ... CVE-2010-3431 Fix available 1.9 LowJanuary 24, 2011
• linux-pam The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM ... CVE-2010-3430 Fix available 4.7 MediumJanuary 24, 2011
• linux-pam The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1... CVE-2010-3316 Fix available 3.3 LowJanuary 24, 2011
• linux-pam Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc... CVE-2009-0579 Fix available 4.6 MediumApril 16, 2009
• linux-pam Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam)... CVE-2009-0887 Fix available 6.6 MediumMarch 12, 2009