mcdope

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

mcdope records in CISA KEV

No mcdope vulnerabilities are listed in CISA KEV.

Records

22 records

TI-2026-35505 CVE-2026-48064

pam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass

HIGH 70

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00342 Published 2026-05-27 Fixed in 0.9.1 CWE-863

TI-2026-32598 CVE-2026-44711

pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption

HIGH 70

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 7.9 Local Low privileges User interaction EPSS 0.00235 Published 2026-05-27 Fixed in 0.8.7 CWE-287

TI-2026-32596 CVE-2026-44709

pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution

HIGH 69

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00151 Published 2026-05-27 Fixed in 0.8.7 CWE-78

TI-2026-32600 CVE-2026-44713

pam_usb: Command injection via $TMUX environment variable leads to RCE as root

LOW 39

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00158 Published 2026-05-27 Fixed in 0.8.7 CWE-116

TI-2026-32599 CVE-2026-44712

pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent

LOW 37

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00154 Published 2026-05-27 Fixed in 0.8.7 CWE-78

TI-2026-34849 CVE-2026-47269

pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local

LOW 34

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00307 Published 2026-05-27 Fixed in 0.9.0 CWE-284

TI-2026-34852 CVE-2026-47272

pam_usb: OTP pad authentication bypass via missing system pad check and uninitialized RNG buffer

LOW 32

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00119 Published 2026-05-27 Fixed in 0.9.0 CWE-287

TI-2026-35506 CVE-2026-48065

pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets

LOW 31

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00149 Published 2026-05-27 Fixed in 0.9.1 CWE-122

TI-2026-36237 CVE-2026-48981

pam_usb: xmlReadFile flags=0 permits XXE network entity fetching in conf.c

LOW 29

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00154 Published 2026-06-18 Fixed in 0.9.2 CWE-611

TI-2026-36236 CVE-2026-48980

pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic

LOW 29

pam_usb provides hardware authentication for Linux using removable media.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00175 Published 2026-06-18 Fixed in 0.9.2 CWE-454

TI-2026-34854 CVE-2026-47274

pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation

LOW 29

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00141 Published 2026-05-27 Fixed in 0.9.0 CWE-427

TI-2026-34853 CVE-2026-47273

pam_usb: XPath injection via PAM-supplied identifiers in pam_usb configuration queries

LOW 29

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00273 Published 2026-05-27 Fixed in 0.9.0 CWE-91

TI-2026-34850 CVE-2026-47270

pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result

LOW 29

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00108 Published 2026-05-27 Fixed in 0.9.0 CWE-362

TI-2026-36239 CVE-2026-48983

pam_usb: TOCTOU race condition in pad directory creation allows symlink substitution

LOW 25

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00107 Published 2026-06-18 Fixed in 0.9.2 CWE-367

TI-2026-36238 CVE-2026-48982

pam_usb: Missing O_EXCL on pad temp file creation allows concurrent update race

LOW 25

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00118 Published 2026-06-18 Fixed in 0.9.2 CWE-362

TI-2026-36241 CVE-2026-48985

pam_usb: NULL Dereference Crash in pusb_is_loginctl_local when loginctl Returns Empty Remote Field

LOW 24

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2026-06-18 Fixed in 0.9.2 CWE-476

TI-2026-35507 CVE-2026-48066

pam_usb: Thread-unsafe static pointer in log.c causes data race under concurrent PAM authentication

LOW 24

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00116 Published 2026-05-27 Fixed in 0.9.1 CWE-362

TI-2026-34851 CVE-2026-47271

pam_usb: OOM guards removed by -DNDEBUG cause NULL dereference and authentication process crash

LOW 22

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00122 Published 2026-05-27 Fixed in 0.9.0 CWE-476

TI-2026-36242 CVE-2026-48986

pam_usb: Infinite loop DoS in process-tree walk when parent process exits during authentication

LOW 21

pam_usb provides hardware authentication for Linux using removable media.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-18 Fixed in 0.9.2 CWE-835

TI-2026-36240 CVE-2026-48984

pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap

LOW 21

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00147 Published 2026-06-18 Fixed in 0.9.2 CWE-14

TI-2026-32597 CVE-2026-44710

pam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service

LOW 20

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00178 Published 2026-05-27 Fixed in 0.8.7 CWE-476

TI-2026-36062 CVE-2026-48792

Protection mechanism failure in mcdope pam_usb

LOW 19

pam_usb provides hardware authentication for Linux using ordinary removable media.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00128 Published 2026-05-27 Fixed in 0.9.1 CWE-390

Open these records in search →