Количество 11
Количество 11
CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
CVE-2026-3184
Util-linux: util-linux: access control bypass due to improper hostname canonicalization
CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in ...
SUSE-SU-2026:1406-1
Security update for util-linux
SUSE-SU-2026:1370-1
Security update for util-linux
SUSE-SU-2026:0856-1
Security update for util-linux
SUSE-SU-2026:0803-1
Security update for util-linux
GHSA-qp7r-5rpf-pwxg
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
openSUSE-SU-2026:20495-1
Security update for util-linux
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3184 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access. | CVSS3: 3.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-3184 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access. | CVSS3: 3.7 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-3184 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access. | CVSS3: 3.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-3184 Util-linux: util-linux: access control bypass due to improper hostname canonicalization | CVSS3: 3.7 | 0% Низкий | 4 месяца назад |
| CVE-2026-3184 A flaw was found in util-linux. Improper hostname canonicalization in ... | CVSS3: 3.7 | 0% Низкий | 4 месяца назад |
 | SUSE-SU-2026:1406-1 Security update for util-linux | 0% Низкий | 4 месяца назад | |
| SUSE-SU-2026:1370-1 Security update for util-linux | 0% Низкий | 4 месяца назад | |
| SUSE-SU-2026:0856-1 Security update for util-linux | 0% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:0803-1 Security update for util-linux | 0% Низкий | 5 месяцев назад | |
| GHSA-qp7r-5rpf-pwxg A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access. | CVSS3: 3.7 | 0% Низкий | 4 месяца назад |
| openSUSE-SU-2026:20495-1 Security update for util-linux | 4 месяца назад |
Уязвимостей на страницу