Lucene search
SuseOPENSUSE-SU-2011:1204-1HistoryNov 02, 2011 - 10:08 p.m.
pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149) (important)
2011-11-0222:08:18
lists.opensuse.org
16
0.0004 Low
EPSS
Percentile
5.7%
The pam_env module is vulnerable to a stack overflow
(CVE-2011-3148) and a DoS condition (CVE-2011-3149) when
parsing users .pam_environment files.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 11.4 | x86_64 | pam-devel | < 1.1.3-4.9.1 | pam-devel-1.1.3-4.9.1.x86_64.rpm |
| openSUSE | 11.4 | x86_64 | pam | < 1.1.3-4.9.1 | pam-1.1.3-4.9.1.x86_64.rpm |
| openSUSE | 11.4 | x86_64 | pam-32bit | < 1.1.3-4.9.1 | pam-32bit-1.1.3-4.9.1.x86_64.rpm |
| openSUSE | 11.4 | i586 | pam | < 1.1.3-4.9.1 | pam-1.1.3-4.9.1.i586.rpm |
| openSUSE | 11.4 | i586 | pam-devel | < 1.1.3-4.9.1 | pam-devel-1.1.3-4.9.1.i586.rpm |
| openSUSE | 11.4 | x86_64 | pam-devel-32bit | < 1.1.3-4.9.1 | pam-devel-32bit-1.1.3-4.9.1.x86_64.rpm |
| openSUSE | 11.4 | i586 | pam-doc | < 1.1.3-4.9.1 | pam-doc-1.1.3-4.9.1.i586.rpm |
| openSUSE | 11.4 | x86_64 | pam-doc | < 1.1.3-4.9.1 | pam-doc-1.1.3-4.9.1.x86_64.rpm |
References
Related
nessus
nessus
CentOS 6 : pam (CESA-2013:0521)
2013-03-10 00:00:00
Scientific Linux Security Update : pam on SL6.x i386/x86_64 (20130221)
2013-03-01 00:00:00
Amazon Linux AMI : pam (ALAS-2013-160)
2013-09-04 00:00:00
openvas
openvas
CentOS Update for pam CESA-2013:0521 centos6
2013-03-12 00:00:00
Oracle: Security Advisory (ELSA-2013-0521)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-160)
2015-09-08 00:00:00
osv
osv
pam - several
2011-10-24 00:00:00
oraclelinux
oraclelinux
pam security, bug fix, and enhancement update
2013-02-22 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2326-1] pam security update
2011-10-26 00:00:00
pam buffer overflow
2011-10-26 00:00:00
centos
centos
pam security update
2013-02-27 19:37:13
f5
f5
SOL16878 - PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
K16878 : PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149
2015-07-02 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DSA 2326-1] pam security update
2011-10-24 17:06:11
amazon
amazon
Medium: pam
2013-03-02 16:48:00
suse
suse
pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. (important)
2011-11-03 00:08:35
Security update for pam (important)
2011-11-03 00:08:45
Security update for pam (important)
2011-11-02 23:08:31
ubuntu
ubuntu
PAM vulnerabilities
2011-10-24 00:00:00
prion
prion
Stack overflow
2012-07-22 17:55:00
Design/Logic Flaw
2012-07-22 17:55:00
debiancve
debiancve
CVE-2011-3148
2012-07-22 17:55:00
CVE-2011-3149
2012-07-22 17:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:42
Denial Of Service (DoS)
2019-05-02 04:53:01
ubuntucve
ubuntucve
CVE-2011-3148
2011-10-24 00:00:00
CVE-2011-3149
2011-10-24 00:00:00
cve
cve
CVE-2011-3148
2012-07-22 17:55:00
CVE-2011-3149
2012-07-22 17:55:00
fedora
fedora
[SECURITY] Fedora 15 Update: pam-1.1.5-1.fc15
2011-12-10 20:05:01
[SECURITY] Fedora 16 Update: pam-1.1.5-1.fc16
2011-12-04 02:23:38
gentoo
gentoo
Linux-PAM: Multiple vulnerabilities
2012-06-25 00:00:00