Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3418

Критический

ALT-PU-2020-3418: package linux-pam update to version 1.5.1-alt1

Источник
errata.altlinux.org
Дата публикации
25.11.2020
Дата обновления
25.11.2020
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades linux-pam to version 1.5.1-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 6 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 8.1
redhat
около 6 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
nvd
почти 6 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
msrc
почти 6 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS3: 9.8
debian
почти 6 лет назад

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it ...