| Package | Affected versions | Patched versions |
|---|---|---|
| linux-pam | = 0.99.1.0= 0.99.10.0= 0.99.2.0= 0.99.2.1= 0.99.3.0= 0.99.4.0= 0.99.5.0= 0.99.6.0= 0.99.6.1= 0.99.6.2= 0.99.6.3= 0.99.7.0= 0.99.7.1= 0.99.8.0= 0.99.8.1= 0.99.9.0= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1.0= 1.1.1= 1.1.2= 1.1.3≤ 1.1.4 |
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free