Логотип exploitDog
bind:CVE-2024-10041
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-10041

Количество 18

Количество 18

ubuntu логотип

CVE-2024-10041

9 месяцев назад

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
EPSS: Низкий
redhat логотип

CVE-2024-10041

9 месяцев назад

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
EPSS: Низкий
nvd логотип

CVE-2024-10041

9 месяцев назад

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
EPSS: Низкий
msrc логотип

CVE-2024-10041

6 месяцев назад

CVSS3: 4.7
EPSS: Низкий
debian логотип

CVE-2024-10041

9 месяцев назад

A vulnerability was found in PAM. The secret information is stored in ...

CVSS3: 4.7
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1549-1

2 месяца назад

Security update for apparmor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1517-1

2 месяца назад

Security update for apparmor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1512-1

2 месяца назад

Security update for apparmor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1511-1

2 месяца назад

Security update for apparmor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1505-1

2 месяца назад

Security update for apparmor

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1334-1

3 месяца назад

Security update for pam

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1158-1

3 месяца назад

Security update for pam

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01511-1

около 2 месяцев назад

Security update for apparmor

EPSS: Низкий
github логотип

GHSA-7gm5-m2xc-vh2j

9 месяцев назад

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
EPSS: Низкий
oracle-oval логотип

ELSA-2024-11250

7 месяцев назад

ELSA-2024-11250: pam security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2025-05059

9 месяцев назад

Уязвимость модуля аутентификации Linux-PAM, связанная с незащищённым хранением конфиденциальной информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 4.7
EPSS: Низкий
rocky логотип

RLSA-2024:10379

7 месяцев назад

Important: pam security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-10379

8 месяцев назад

ELSA-2024-10379: pam security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-10041

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
0%
Низкий
9 месяцев назад
redhat логотип
CVE-2024-10041

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2024-10041

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
0%
Низкий
9 месяцев назад
msrc логотип
CVSS3: 4.7
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-10041

A vulnerability was found in PAM. The secret information is stored in ...

CVSS3: 4.7
0%
Низкий
9 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:1549-1

Security update for apparmor

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1517-1

Security update for apparmor

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1512-1

Security update for apparmor

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1511-1

Security update for apparmor

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1505-1

Security update for apparmor

0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1334-1

Security update for pam

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1158-1

Security update for pam

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:01511-1

Security update for apparmor

0%
Низкий
около 2 месяцев назад
github логотип
GHSA-7gm5-m2xc-vh2j

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

CVSS3: 4.7
0%
Низкий
9 месяцев назад
oracle-oval логотип
ELSA-2024-11250

ELSA-2024-11250: pam security update (MODERATE)

7 месяцев назад
fstec логотип
BDU:2025-05059

Уязвимость модуля аутентификации Linux-PAM, связанная с незащищённым хранением конфиденциальной информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 4.7
0%
Низкий
9 месяцев назад
rocky логотип
RLSA-2024:10379

Important: pam security update

7 месяцев назад
oracle-oval логотип
ELSA-2024-10379

ELSA-2024-10379: pam security update (IMPORTANT)

8 месяцев назад

Уязвимостей на страницу