Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3149HistoryJul 22, 2012 - 5:55 p.m.
CVE-2011-3149
2012-07-2217:55:01
Debian Security Bug Tracker
security-tracker.debian.org
18
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0
Percentile
5.1%
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pam | < 1.1.3-5 | pam_1.1.3-5_all.deb |
| Debian | 11 | all | pam | < 1.1.3-5 | pam_1.1.3-5_all.deb |
| Debian | 999 | all | pam | < 1.1.3-5 | pam_1.1.3-5_all.deb |
| Debian | 13 | all | pam | < 1.1.3-5 | pam_1.1.3-5_all.deb |
Related
prion
prion
Design/Logic Flaw
2012-07-22 17:55:00
nessus
nessus
Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)
2011-12-12 00:00:00
Fedora 16 : pam-1.1.5-1.fc16 (2011-16390)
2011-12-05 00:00:00
Amazon Linux AMI : pam (ALAS-2013-160)
2013-09-04 00:00:00
openvas
openvas
Fedora Update for pam FEDORA-2011-16365
2011-12-12 00:00:00
Fedora Update for pam FEDORA-2011-16390
2012-04-02 00:00:00
Fedora Update for pam FEDORA-2011-16365
2011-12-12 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: pam-1.1.5-1.fc16
2011-12-04 02:23:38
[SECURITY] Fedora 15 Update: pam-1.1.5-1.fc15
2011-12-10 20:05:01
ubuntucve
ubuntucve
CVE-2011-3149
2011-10-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:53:01
cve
cve
CVE-2011-3149
2012-07-22 17:55:01
nvd
nvd
CVE-2011-3149
2012-07-22 17:55:01
cvelist
cvelist
CVE-2011-3149
2012-07-22 17:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2326-1] pam security update
2011-10-26 00:00:00
pam buffer overflow
2011-10-26 00:00:00
centos
centos
pam security update
2013-02-27 19:37:13
oraclelinux
oraclelinux
pam security, bug fix, and enhancement update
2013-02-22 00:00:00
amazon
amazon
Medium: pam
2013-03-02 16:48:00
debian
debian
[SECURITY] [DSA 2326-1] pam security update
2011-10-24 16:50:48
f5
f5
K16878 : PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
SOL16878 - PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
osv
osv
pam - several
2011-10-24 00:00:00
suse
suse
pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. (important)
2011-11-03 00:08:35
Security update for pam (important)
2011-11-02 23:08:31
redhat
redhat
ubuntu
ubuntu
PAM vulnerabilities
2011-10-24 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2012-06-25 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2011-3149