Lucene search

K
suseSuseOPENSUSE-SU-2011:1208-1
HistoryNov 03, 2011 - 12:08 a.m.

pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. (important)

2011-11-0300:08:35
lists.opensuse.org
16

0.0004 Low

EPSS

Percentile

8.6%

The pam_env module is vulnerable to a stack overflow
(CVE-2011-3148) and a DoS condition (CVE-2011-3149) when
parsing users .pam_environment files. Additionally a
missing return value check inside pam_xauth has been fixed
(CVE-2010-3316).