Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201605-05
HistoryMay 31, 2016 - 12:00 a.m.

Linux-PAM: Multiple vulnerabilities

2016-05-3100:00:00
Gentoo Foundation
security.gentoo.org
19

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

EPSS

0.005

Percentile

76.3%

JSON

Background

Linux-PAM (Pluggable Authentication Modules) is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes.

Description

Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details.

Impact

Remote attackers could cause Denial of Service, conduct brute force attacks, and conduct username enumeration.

Workaround

There is no known workaround at this time.

Resolution

All Linux-PAM users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-libs/pam-1.2.1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-libs/pam<ย 1.2.1UNKNOWN

Related

nessus 22
openvas 22
ubuntu 3
cloudfoundry 1
ibm 18
amazon 2
mageia 2
fedora 3
ubuntucve 3
debiancve 3
cve 3
prion 3
cvelist 3
nvd 3
centos 1
veracode 1
f5 2
redhat 1
oraclelinux 1
seebug 1
osv 1
suse 3
oracle 1
nessus
nessus
Ubuntu 14.04 LTS : PAM vulnerabilities (USN-2935-1)
2016-03-17 00:00:00
Ubuntu 14.04 LTS : PAM regression (USN-2935-2)
2016-03-17 00:00:00
Ubuntu 12.04 LTS : pam regression (USN-2935-3)
2016-03-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2935-1)
2016-03-17 00:00:00
Ubuntu: Security Advisory (USN-2935-2)
2016-03-17 00:00:00
Ubuntu: Security Advisory (USN-2935-3)
2016-03-18 00:00:00
ubuntu
ubuntu
PAM regression
2016-03-16 00:00:00
PAM vulnerabilities
2016-03-16 00:00:00
PAM regression
2016-03-17 00:00:00
cloudfoundry
cloudfoundry
USN-2935-2 PAM regression | Cloud Foundry
2016-05-06 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in PAM affect Power Hardware Management Console (โ€ชCVE-2013-7041 and CVE-2015-3238โ€ฌ)
2021-09-23 01:31:39
Security Bulletin: IBM Flex System Manager (FSM) is affected by a Pluggable Authentication Module (PAM) vulnerability (CVE-2013-7041)
2018-06-18 01:33:18
Security Bulletin: Vulnerability in pam affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2013-7041)
2023-04-14 14:32:25
amazon
amazon
Medium: pam
2014-06-15 16:18:00
Medium: pam
2015-09-02 12:00:00
mageia
mageia
Updated pam packages fix security vulnerabilities
2015-05-12 22:37:48
Updated pam package fixes security vulnerability
2015-07-05 20:22:03
fedora
fedora
[SECURITY] Fedora 20 Update: pam-1.1.8-2.fc20
2014-12-18 06:07:52
[SECURITY] Fedora 22 Update: pam-1.1.8-19.fc22
2015-06-30 20:20:46
[SECURITY] Fedora 21 Update: pam-1.1.8-19.fc21
2015-07-03 18:39:15
ubuntucve
ubuntucve
CVE-2013-7041
2014-05-08 00:00:00
CVE-2015-3238
2015-08-24 00:00:00
CVE-2014-2583
2014-04-10 00:00:00
debiancve
debiancve
CVE-2013-7041
2014-05-08 14:29:12
CVE-2015-3238
2015-08-24 14:59:04
CVE-2014-2583
2014-04-10 20:29:20
cve
cve
CVE-2013-7041
2014-05-08 14:29:12
CVE-2015-3238
2015-08-24 14:59:04
CVE-2014-2583
2014-04-10 20:29:20
prion
prion
Design/Logic Flaw
2014-05-08 14:29:00
Default credentials
2015-08-24 14:59:00
Directory traversal
2014-04-10 20:29:00
cvelist
cvelist
CVE-2013-7041
2014-05-08 14:00:00
CVE-2015-3238
2015-08-24 14:00:00
CVE-2014-2583
2014-04-10 14:00:00
nvd
nvd
CVE-2013-7041
2014-05-08 14:29:12
CVE-2015-3238
2015-08-24 14:59:04
CVE-2014-2583
2014-04-10 20:29:20
centos
centos
pam security update
2015-08-18 15:30:42
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:22
f5
f5
SOL17494 - PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
K17494 : PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
redhat
redhat
(RHSA-2015:1640) Moderate: pam security update
2015-08-18 00:00:00
oraclelinux
oraclelinux
pam security update
2015-08-18 00:00:00
seebug
seebug
Linux-PAM &quot;pam_timestamp&quot;ๆจกๅ—็›ฎๅฝ•้ๅŽ†ๆผๆดž
2014-04-10 00:00:00
osv
osv
pam-1.3.0-3.4 on GA media
2024-06-15 00:00:00
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

EPSS

0.005

Percentile

76.3%

JSON
Related for GLSA-201605-05
nessus22openvas22ubuntu3cloudfoundry1ibm18amazon2mageia2fedora3ubuntucve3debiancve3cve3prion3cvelist3nvd3centos1veracode1f52redhat1oraclelinux1seebug1osv1suse3oracle1