CVE-2020-27678

2020-10-2320:25:17

mitre

www.cve.org

illumos

omnios

buffer overflow

parse_user_name

libpam

pam_framework

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.

References

github.com/illumos/illumos-gate/commit/1d276e0b382cf066dae93640746d8b4c54d15452