| Package | Affected versions | Patched versions |
|---|---|---|
| util-linux | = 2.10s= 2.11f= 2.11h= 2.11i= 2.11k |
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free