Lucene search
OracleLinuxELSA-2024-2438HistoryMay 03, 2024 - 12:00 a.m.
pam security update
2024-05-0300:00:00
linux.oracle.com
4
pam
security
update
unix
systems
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
[1.3.1-19.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]
[1.3.1-19] - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
situations. CVE-2024-22365. Resolves: RHEL-21244
[1.3.1-18] - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300
[1.5.1-17] - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943
[1.5.1-16] - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
- fix formatting of audit messages. Resolves: RHEL-5100
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
| oracle linux | 9 | aarch64 | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.aarch64.rpm |
| oracle linux | 9 | aarch64 | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.aarch64.rpm |
| oracle linux | 9 | aarch64 | pam-devel | < 1.5.1-19.0.1.el9 | pam-devel-1.5.1-19.0.1.el9.aarch64.rpm |
| oracle linux | 9 | aarch64 | pam-docs | < 1.5.1-19.0.1.el9 | pam-docs-1.5.1-19.0.1.el9.aarch64.rpm |
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
| oracle linux | 9 | src | pam | < 1.5.1-19.0.1.el9 | pam-1.5.1-19.0.1.el9.src.rpm |
Related
redhat
redhat
(RHSA-2024:2438) Moderate: pam security update
2024-04-30 06:15:42
(RHSA-2024:3163) Moderate: pam security update
2024-05-22 06:35:47
osv
osv
Moderate: pam security update
2024-06-14 13:59:16
CVE-2024-22365
2024-02-06 08:15:52
Moderate: pam security update
2024-04-30 00:00:00
nessus
nessus
EulerOS 2.0 SP12 : pam (EulerOS-SA-2024-1747)
2024-05-30 00:00:00
SUSE SLES12 Security Update : pam (SUSE-SU-2024:0137-1)
2024-01-19 00:00:00
EulerOS 2.0 SP12 : pam (EulerOS-SA-2024-1770)
2024-05-30 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0137-1)
2024-01-19 00:00:00
openSUSE: Security Advisory for pam (SUSE-SU-2024:0136-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6588-2)
2024-03-27 00:00:00
ubuntu
ubuntu
PAM vulnerability
2024-03-26 00:00:00
PAM vulnerability
2024-01-17 00:00:00
cvelist
cvelist
CVE-2024-22365
2024-02-06 00:00:00
nvd
nvd
CVE-2024-22365
2024-02-06 08:15:52
redhatcve
redhatcve
CVE-2024-22365
2024-01-19 12:04:26
cbl_mariner
cbl_mariner
CVE-2024-22365 affecting package pam for versions less than 1.5.1-6
2024-04-09 20:48:36
alpinelinux
alpinelinux
CVE-2024-22365
2024-02-06 08:15:52
cve
cve
CVE-2024-22365
2024-02-06 08:15:52
slackware
slackware
[slackware-security] pam
2024-01-26 21:03:08
almalinux
almalinux
Moderate: pam security update
2024-05-22 00:00:00
Moderate: pam security update
2024-04-30 00:00:00
redos
redos
ROS-20240409-14
2024-04-09 00:00:00
amazon
amazon
Low: pam
2024-02-01 19:57:00
veracode
veracode
Denial Of Service (DoS)
2024-04-10 17:16:30
cloudfoundry
cloudfoundry
USN-6588-1: PAM vulnerability | Cloud Foundry
2024-02-29 00:00:00
mageia
mageia
Updated pam packages fix a security vulnerability
2024-02-09 04:34:03
prion
prion
Code injection
2024-02-06 08:15:00
oraclelinux
oraclelinux
pam security update
2024-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2024-22365
2024-01-17 00:00:00
debiancve
debiancve
CVE-2024-22365
2024-02-06 08:15:52
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0554
2024-01-20 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0193
2024-01-19 00:00:00
Moderate Photon OS Security Update - PHSA-2024-3.0-0714
2024-01-18 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.
2024-06-17 11:59:28
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for ELSA-2024-2438