2 matches found
SUSE-SU-2026:3163-1 Security update for pam
This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pamuserdb module's plaintext-password comparison bsc1268290...
8.2CVSS5.2AI score0.00333EPSS
SaveExploits0References3
CVE-2026-54411
Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the...
8.2CVSS6AI score0.00333EPSS
SaveExploits0References6
20