| Package | Affected versions | Patched versions |
|---|---|---|
| pam | ≤ 0.80 |
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free