Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 9

Количество 9

fstec логотип

BDU:2022-06184

больше 4 лет назад

Уязвимость функции pam_access.so модуля аутентификации Linux-PAM, позволяющая нарушителю обойти существующие ограничения безопасности

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2023-8737

больше 3 лет назад

ALT-PU-2023-8737: package `linux-pam` update to version 1.5.3-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2024-8886

больше 2 лет назад

ALT-PU-2024-8886: package `linux-pam` update to version 1.6.1-alt1

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2022-28321

около 4 лет назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2022-28321

около 4 лет назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2022-28321

около 4 лет назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
EPSS: Низкий
msrc логотип

CVE-2022-28321

около 1 года назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

EPSS: Низкий
debian логотип

CVE-2022-28321

около 4 лет назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-p9vf-jjj8-m5r9

около 4 лет назад

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2022-06184

Уязвимость функции pam_access.so модуля аутентификации Linux-PAM, позволяющая нарушителю обойти существующие ограничения безопасности

CVSS3: 9.8
2%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2023-8737

ALT-PU-2023-8737: package `linux-pam` update to version 1.5.3-alt1

CVSS3: 9.8
2%
Низкий
больше 3 лет назад
altlinux логотип
ALT-PU-2024-8886

ALT-PU-2024-8886: package `linux-pam` update to version 1.6.1-alt1

CVSS3: 9.8
больше 2 лет назад
ubuntu логотип
CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
2%
Низкий
около 4 лет назад
redhat логотип
CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
2%
Низкий
около 4 лет назад
nvd логотип
CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
2%
Низкий
около 4 лет назад
msrc логотип
CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

2%
Низкий
около 1 года назад
debian логотип
CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows ...

CVSS3: 9.8
2%
Низкий
около 4 лет назад
github логотип
GHSA-p9vf-jjj8-m5r9

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.

CVSS3: 9.8
2%
Низкий
около 4 лет назад

Уязвимостей на страницу