PAM vulnerability

2024-03-2600:00:00

ubuntu.com

ubuntu 14.04 esm

ubuntu 16.04 esm

ubuntu 18.04 esm

pluggable authentication modules

directory checks

denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

pam - Pluggable Authentication Modules

Details

USN-6588-1 fixed a vulnerability in PAM. This update
provides the corresponding updates for Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.

Original advisory details:

Matthias Gerstner discovered that the PAM pam_namespace module incorrectly
handled special files when performing directory checks. A local attacker
could possibly use this issue to cause PAM to stop responding, resulting in
a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibpam-modules< 1.1.8-3.6ubuntu2.18.04.6+esm1UNKNOWN
Ubuntu18.04noarchlibpam-cracklib< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-cracklib-dbgsym< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-doc< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-modules< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-modules-bin< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-modules-bin-dbgsym< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-modules-dbgsym< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam-runtime< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN
Ubuntu18.04noarchlibpam0g< 1.1.8-3.6ubuntu2.18.04.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	libpam-modules	< 1.1.8-3.6ubuntu2.18.04.6+esm1	UNKNOWN
Ubuntu	18.04	noarch	libpam-cracklib	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-cracklib-dbgsym	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-doc	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-modules	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-modules-bin	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-modules-bin-dbgsym	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-modules-dbgsym	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam-runtime	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN
Ubuntu	18.04	noarch	libpam0g	< 1.1.8-3.6ubuntu2.18.04.6	UNKNOWN