Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6588-1
HistoryJan 17, 2024 - 12:00 a.m.

PAM vulnerability

2024-01-1700:00:00
ubuntu.com
21
ubuntu
pluggable authentication modules
directory checks
denial of service
local attacker
vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

9.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • pam - Pluggable Authentication Modules

Details

Matthias Gerstner discovered that the PAM pam_namespace module incorrectly
handled special files when performing directory checks. A local attacker
could possibly use this issue to cause PAM to stop responding, resulting in
a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibpam-modules< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam-doc< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam-modules-bin< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam-modules-bin-dbgsym< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam-modules-dbgsym< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam-runtime< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam0g< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam0g-dbgsym< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibpam0g-dev< 1.5.2-6ubuntu1.1UNKNOWN
Ubuntu23.04noarchlibpam-modules< 1.5.2-5ubuntu1.1UNKNOWN
Rows per page:
1-10 of 401

Related

redhatcve 1
cbl_mariner 1
nessus 27
openvas 19
osv 6
alpinelinux 1
cve 1
slackware 1
ubuntu 1
cvelist 1
nvd 1
redhat 18
veracode 1
amazon 1
oraclelinux 2
cloudfoundry 1
mageia 1
prion 1
almalinux 2
ubuntucve 1
debiancve 1
redos 1
photon 3
ibm 3
hp 2
redhatcve
redhatcve
CVE-2024-22365
2024-01-19 12:04:26
cbl_mariner
cbl_mariner
CVE-2024-22365 affecting package pam for versions less than 1.5.1-6
2024-04-09 20:48:36
nessus
nessus
EulerOS Virtualization 2.10.1 : pam (EulerOS-SA-2024-1553)
2024-04-19 00:00:00
EulerOS Virtualization 2.10.0 : pam (EulerOS-SA-2024-1534)
2024-04-19 00:00:00
EulerOS Virtualization 2.11.0 : pam (EulerOS-SA-2024-1633)
2024-05-15 00:00:00
openvas
openvas
openSUSE: Security Advisory for pam (SUSE-SU-2024:0136-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6588-2)
2024-03-27 00:00:00
Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2024-1770)
2024-05-30 00:00:00
osv
osv
Moderate: pam security update
2024-04-30 00:00:00
Moderate: pam security update
2024-06-14 13:59:16
CVE-2024-22365
2024-02-06 08:15:52
alpinelinux
alpinelinux
CVE-2024-22365
2024-02-06 08:15:52
cve
cve
CVE-2024-22365
2024-02-06 08:15:52
slackware
slackware
[slackware-security] pam
2024-01-26 21:03:08
ubuntu
ubuntu
PAM vulnerability
2024-03-26 00:00:00
cvelist
cvelist
CVE-2024-22365
2024-02-06 00:00:00
nvd
nvd
CVE-2024-22365
2024-02-06 08:15:52
redhat
redhat
(RHSA-2024:2438) Moderate: pam security update
2024-04-30 06:15:42
(RHSA-2024:3163) Moderate: pam security update
2024-05-22 06:35:47
(RHSA-2024:3368) Important: Errata Advisory for Red Hat OpenShift GitOps v1.12.3 security update
2024-05-28 08:19:54
veracode
veracode
Denial Of Service (DoS)
2024-04-10 17:16:30
amazon
amazon
Low: pam
2024-02-01 19:57:00
oraclelinux
oraclelinux
pam security update
2024-05-03 00:00:00
pam security update
2024-05-23 00:00:00
cloudfoundry
cloudfoundry
USN-6588-1: PAM vulnerability | Cloud Foundry
2024-02-29 00:00:00
mageia
mageia
Updated pam packages fix a security vulnerability
2024-02-09 04:34:03
prion
prion
Code injection
2024-02-06 08:15:00
almalinux
almalinux
Moderate: pam security update
2024-04-30 00:00:00
Moderate: pam security update
2024-05-22 00:00:00
ubuntucve
ubuntucve
CVE-2024-22365
2024-01-17 00:00:00
debiancve
debiancve
CVE-2024-22365
2024-02-06 08:15:52
redos
redos
ROS-20240409-14
2024-04-09 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0554
2024-01-20 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0193
2024-01-19 00:00:00
Moderate Photon OS Security Update - PHSA-2024-3.0-0714
2024-01-18 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.
2024-06-17 11:59:28
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
2024-06-20 20:32:32
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities
2024-06-26 09:20:14
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

9.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for USN-6588-1
redhatcve1cbl_mariner1nessus27openvas19osv6alpinelinux1cve1slackware1ubuntu1cvelist1nvd1redhat18veracode1amazon1oraclelinux2cloudfoundry1mageia1prion1almalinux2ubuntucve1debiancve1redos1photon3ibm3hp2