Lucene search
K

33 matches found

OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2026-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.0009EPSS
Exploits13References2
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.1 views

EulerOS 2.0 SP9 : pam (EulerOS-SA-2026-1016)

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows a...

7.8CVSS8.1AI score0.0009EPSS
Exploits13References2
SUSE Linux
SUSE Linux
added 2025/07/29 2:28 p.m.3 views

Security update for pam-config

This update for pam-config fixes the following issues: CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS9.7AI score0.0009EPSS
Exploits13References4
OSV
OSV
added 2025/07/29 2:9 p.m.1 views

SUSE-SU-2025:20513-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226...

7.8CVSS5.8AI score0.0009EPSS
Exploits13References3
SUSE Linux
SUSE Linux
added 2025/07/28 2:36 p.m.4 views

Security update for pam-config

This update for pam-config fixes the following issues: CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS9.7AI score0.0009EPSS
Exploits13References4
OSV
OSV
added 2025/07/28 2:34 p.m.1 views

SUSE-SU-2025:20533-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack. bsc1243226...

7.8CVSS5.8AI score0.0009EPSS
Exploits13References3
NVD
NVD
added 2025/07/23 3:15 p.m.4 views

CVE-2025-6018

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS0.0009EPSS
Exploits13References5
OSV
OSV
added 2025/07/23 3:15 p.m.2 views

CVE-2025-6018

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS5.8AI score0.0009EPSS
Exploits13References5
Cvelist
Cvelist
added 2025/07/23 2:58 p.m.6 views

CVE-2025-6018 Pam-config: lpe from unprivileged to allow_active in pam

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS0.0009EPSS
Exploits13References4
Vulnrichment
Vulnrichment
added 2025/07/23 2:58 p.m.6 views

CVE-2025-6018 Pam-config: lpe from unprivileged to allow_active in pam

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

7.8CVSS7.9AI score0.0009EPSS
Exploits13References4
CVE
CVE
added 2025/07/23 2:58 p.m.94 views

CVE-2025-6018

CVE-2025-6018 is a Local Privilege Escalation in pam-config of Linux PAM. The PAM environment module pam_env.so can be fed via a user’s ~/.pam_environment and, if loaded before pam_systemd.so (e.g., in sshd PAM stacks), may cause Polkit to treat the user as a local active user and grant elevated ...

7.8CVSS7.9AI score0.0009EPSS
Exploits13References5Affected Software1
OpenVAS
OpenVAS
added 2025/06/26 12:0 a.m.3 views

openSUSE Security Advisory (SUSE-SU-2025:02080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.4AI score0.0009EPSS
Exploits13References4
OpenVAS
OpenVAS
added 2025/06/26 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2025:02080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.4AI score0.0009EPSS
Exploits13References4
Tenable Nessus
Tenable Nessus
added 2025/06/26 12:0 a.m.4 views

SUSE SLES12 Security Update : pam-config (SUSE-SU-2025:02081-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:02081-1 advisory. - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226. Tenable has...

7.8CVSS8.2AI score0.0009EPSS
Exploits13References4
OpenVAS
OpenVAS
added 2025/06/26 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2025:02082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.4AI score0.0009EPSS
Exploits13References4
OpenVAS
OpenVAS
added 2025/06/26 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2025:02081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.4AI score0.0009EPSS
Exploits13References4
Tenable Nessus
Tenable Nessus
added 2025/06/26 12:0 a.m.4 views

SUSE SLES15 Security Update : pam-config (SUSE-SU-2025:02082-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02082-1 advisory. - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226. Tenabl...

7.8CVSS8.2AI score0.0009EPSS
Exploits13References4
Tenable Nessus
Tenable Nessus
added 2025/06/25 12:0 a.m.4 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam-config (SUSE-SU-2025:02080-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02080-1 advisory. - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of t...

7.8CVSS8.2AI score0.0009EPSS
Exploits13References4
SUSE Linux
SUSE Linux
added 2025/06/24 10:29 a.m.3 views

Security update for pam-config

This update for pam-config fixes the following issues: CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.6CVSS7.2AI score0.0009EPSS
Exploits13References4
OSV
OSV
added 2025/06/24 10:28 a.m.1 views

SUSE-SU-2025:02082-1 Security update for pam-config

This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226...

7.8CVSS5.8AI score0.0009EPSS
Exploits13References3
Rows per page
Query Builder