Lucene search

K
cvelistMitreCVELIST:CVE-2018-9275
HistoryApr 04, 2018 - 6:00 p.m.

CVE-2018-9275

2018-04-0418:00:00
mitre
www.cve.org
3
yubico
pam module
login
vulnerability
file descriptors
information disclosure
dos

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

57.1%

In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

57.1%