Lucene search
HistoryJul 22, 2012 - 5:55 p.m.
CVE-2011-3149
cve-2011-3149
linux-pam
pam_env module
denial of service
cpu consumption
nvd
5.7 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
Related
openvas
openvas
Fedora Update for pam FEDORA-2011-16365
2011-12-12 00:00:00
Fedora Update for pam FEDORA-2011-16390
2012-04-02 00:00:00
Fedora Update for pam FEDORA-2011-16365
2011-12-12 00:00:00
prion
prion
Design/Logic Flaw
2012-07-22 17:55:00
nessus
nessus
Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)
2011-12-12 00:00:00
Fedora 16 : pam-1.1.5-1.fc16 (2011-16390)
2011-12-05 00:00:00
CentOS 6 : pam (CESA-2013:0521)
2013-03-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:53:01
fedora
fedora
[SECURITY] Fedora 15 Update: pam-1.1.5-1.fc15
2011-12-10 20:05:01
[SECURITY] Fedora 16 Update: pam-1.1.5-1.fc16
2011-12-04 02:23:38
ubuntucve
ubuntucve
CVE-2011-3149
2011-10-24 00:00:00
debiancve
debiancve
CVE-2011-3149
2012-07-22 17:55:00
osv
osv
pam - several
2011-10-24 00:00:00
oraclelinux
oraclelinux
pam security, bug fix, and enhancement update
2013-02-22 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2326-1] pam security update
2011-10-26 00:00:00
pam buffer overflow
2011-10-26 00:00:00
centos
centos
pam security update
2013-02-27 19:37:13
f5
f5
SOL16878 - PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
K16878 : PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
redhat
redhat
suse
suse
pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. (important)
2011-11-03 00:08:35
Security update for pam (important)
2011-11-03 00:08:24
debian
debian
[SECURITY] [DSA 2326-1] pam security update
2011-10-24 17:06:11
amazon
amazon
Medium: pam
2013-03-02 16:48:00
ubuntu
ubuntu
PAM vulnerabilities
2011-10-24 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2012-06-25 00:00:00
5.7 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2011-3149