Lucene search
+L

2 matches found

SUSE Linux
SUSE Linux
added 2025/02/24 12:55 p.m.2 views

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24032: default value for certpolicy none allows for authentication bypass bsc1237062. CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash bsc1237058. Patch...

7.5CVSS7.6AI score0.00681EPSS
SaveExploits0References8
OSV
OSV
added 2025/02/10 4:15 p.m.4 views

UBUNTU-CVE-2025-24032

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if certpolicy is set to none the default value, then pampkcs11 will only check if the user is capable of logging into the token. An attacker may create a different token with the user...

9.2CVSS5.7AI score0.00681EPSS
SaveExploits0References3
Rows per page
Query Builder