Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-3238
HistoryAug 24, 2015 - 2:59 p.m.

CVE-2015-3238

2015-08-2414:59:04
CWE-200
[email protected]
web.nvd.nist.gov
81
cve-2015-3238
linux-pam
pam_unix module
denial of service
hang
password enumeration
nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

6.1

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.

Affected configurations

NVD
Node
linux-pamlinux-pamRange≤1.1.8
Node
oraclesparc-opl_service_processorRange≤1121
VendorProductVersionCPE
linux-pamlinux-pamcpe:/a:linux-pam:linux-pam::::

Related

oraclelinux 1
f5 2
nessus 17
redhat 1
debiancve 1
openvas 18
ibm 16
fedora 2
cvelist 1
veracode 1
prion 1
amazon 1
nvd 1
ubuntucve 1
centos 1
mageia 1
ubuntu 3
gentoo 1
cloudfoundry 1
suse 3
oracle 1
oraclelinux
oraclelinux
pam security update
2015-08-18 00:00:00
f5
f5
SOL17494 - PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
K17494 : PAM vulnerability CVE-2015-3238
2015-10-27 00:00:00
nessus
nessus
F5 Networks BIG-IP : PAM vulnerability (SOL17494)
2016-01-28 00:00:00
Fedora 22 : pam-1.1.8-19.fc22 (2015-10830)
2015-07-01 00:00:00
Oracle Linux 6 / 7 : pam (ELSA-2015-1640)
2015-08-19 00:00:00
redhat
redhat
(RHSA-2015:1640) Moderate: pam security update
2015-08-18 00:00:00
debiancve
debiancve
CVE-2015-3238
2015-08-24 14:59:04
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0266)
2015-10-15 00:00:00
F5 BIG-IP - PAM vulnerability CVE-2015-3238
2015-10-28 00:00:00
CentOS Update for pam CESA-2015:1640 centos7
2015-08-20 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in the Linux Pluggable Authentication Module (PAM) affects the IBM FlashSystem model V840 (CVE-2015-3238)
2018-06-18 00:10:21
Security Bulletin: Vulnerability in Pluggable Authentication Modules (PAM) affects IBM SAN Volume Controller and Storwize Family (CVE-2015-3238)
2023-03-29 01:48:02
Security Bulletin:A vulnerability in the Linux Pluggable Authentication Module (PAM) affects the IBM FlashSystem models 840 and 900 (CVE-2015-3238)
2023-02-18 01:45:50
fedora
fedora
[SECURITY] Fedora 22 Update: pam-1.1.8-19.fc22
2015-06-30 20:20:46
[SECURITY] Fedora 21 Update: pam-1.1.8-19.fc21
2015-07-03 18:39:15
cvelist
cvelist
CVE-2015-3238
2015-08-24 14:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:22
prion
prion
Default credentials
2015-08-24 14:59:00
amazon
amazon
Medium: pam
2015-09-02 12:00:00
nvd
nvd
CVE-2015-3238
2015-08-24 14:59:04
ubuntucve
ubuntucve
CVE-2015-3238
2015-08-24 00:00:00
centos
centos
pam security update
2015-08-18 15:30:42
mageia
mageia
Updated pam package fixes security vulnerability
2015-07-05 20:22:03
ubuntu
ubuntu
PAM vulnerabilities
2016-03-16 00:00:00
PAM regression
2016-03-17 00:00:00
PAM regression
2016-03-16 00:00:00
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2016-05-31 00:00:00
cloudfoundry
cloudfoundry
USN-2935-2 PAM regression | Cloud Foundry
2016-05-06 00:00:00
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

6.1

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON
Related for CVE-2015-3238
oraclelinux1f52nessus17redhat1debiancve1openvas18ibm16fedora2cvelist1veracode1prion1amazon1nvd1ubuntucve1centos1mageia1ubuntu3gentoo1cloudfoundry1suse3oracle1