Red Hat Security AdvisoryRHSA-2013:0521
pam security, bug fix, and enhancement update
Released 2013-02-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) pam-1.1.1-13.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) pam-1.1.1-13.el6, pam-devel-1.1.1-13.el6
- Red Hat Enterprise Linux HPC Node (v. 6) pam-1.1.1-13.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) pam-1.1.1-13.el6, pam-devel-1.1.1-13.el6
- Red Hat Enterprise Linux Server (v. 6) pam-1.1.1-13.el6, pam-1.1.1-13.el6.ppc, pam-devel-1.1.1-13.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) pam-1.1.1-13.el6, pam-devel-1.1.1-13.el6
Fixes 2 records
Priority LOW 22
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00696 · Published 2012-07-22 · Fixed CWE-119
Priority LOW 12
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00532 · Published 2012-07-22 · Fixed CWE-119
