Lucene search
GoogleOSV:CVE-2018-9275HistoryApr 04, 2018 - 6:29 p.m.
CVE-2018-9275
2018-04-0418:29:02
Google
osv.dev
1
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).
| CPE | Name | Operator | Version |
|---|---|---|---|
| yubico-pam | eq | 2.18 | |
| yubico-pam | eq | 2.25 | |
| yubico-pam | eq | 2.21 | |
| yubico-pam | eq | 2.20 | |
| yubico-pam | eq | 2.23 | |
| yubico-pam | eq | 2.24 | |
| yubico-pam | eq | 2.22 | |
| yubico-pam | eq | 2.19 |
Related
openvas
openvas
Fedora Update for pam_yubico FEDORA-2018-75fdc70018
2018-08-04 00:00:00
Fedora Update for pam_yubico FEDORA-2018-73bd3d14a3
2018-08-04 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: pam_yubico-2.26-1.fc28
2018-08-02 16:22:44
[SECURITY] Fedora 27 Update: pam_yubico-2.26-1.fc27
2018-08-02 15:40:45
nvd
nvd
CVE-2018-9275
2018-04-04 18:29:02
debiancve
debiancve
CVE-2018-9275
2022-10-03 16:21:57
cve
cve
CVE-2018-9275
2022-10-03 16:21:57
nessus
nessus
Fedora 27 : pam_yubico (2018-73bd3d14a3)
2018-08-03 00:00:00
Fedora 28 : pam_yubico (2018-75fdc70018)
2019-01-03 00:00:00
cvelist
cvelist
CVE-2018-9275
2022-10-03 16:21:57
ubuntucve
ubuntucve
CVE-2018-9275
2018-04-04 00:00:00
prion
prion
Information disclosure
2018-04-04 18:29:00