Описание
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).
Ссылки
- Issue TrackingThird Party Advisory
- Patch
- Issue TrackingThird Party Advisory
- Issue TrackingThird Party Advisory
- Patch
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
EPSS
8.2 High
CVSS3
6.4 Medium
CVSS2
Дефекты
Связанные уязвимости
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico ...
In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).
EPSS
8.2 High
CVSS3
6.4 Medium
CVSS2