Red Hat Security AdvisoryRHSA-2015:1640
pam security update
Released 2015-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) pam-1.1.8-12.el7_1.1
- Red Hat Enterprise Linux Client Optional (v. 7) pam-devel-1.1.8-12.el7_1.1
- Red Hat Enterprise Linux ComputeNode (v. 7) pam-1.1.8-12.el7_1.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pam-devel-1.1.8-12.el7_1.1
- Red Hat Enterprise Linux Desktop (v. 6) pam-1.1.1-20.el6_7.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) pam-devel-1.1.1-20.el6_7.1
- Red Hat Enterprise Linux HPC Node (v. 6) pam-1.1.1-20.el6_7.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) pam-devel-1.1.1-20.el6_7.1
- Red Hat Enterprise Linux Server (v. 6) pam-1.1.1-20.el6_7.1, pam-1.1.1-20.el6_7.1.ppc, pam-devel-1.1.1-20.el6_7.1 +1
- Red Hat Enterprise Linux Server (v. 7) pam-1.1.8-12.ael7b_1.1, pam-1.1.8-12.el7_1.1, pam-1.1.8-12.el7_1.1.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) pam-1.1.1-20.el6_7.1, pam-devel-1.1.1-20.el6_7.1
- Red Hat Enterprise Linux Workstation (v. 7) pam-1.1.8-12.el7_1.1, pam-devel-1.1.8-12.el7_1.1
Fixes 1 record
Priority LOW 34
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via…
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02705 · Published 2015-08-24 · Partial fix CWE-200
