CVE-2015-3238

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.html
• lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.html
• rhn.redhat.com/errata/RHSA-2015-1640.html · Vendor Advisory
• openwall.com/lists/oss-security/2015/06/25/13
• oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
• securityfocus.com/bid/75428
• ubuntu.com/usn/USN-2935-1
• ubuntu.com/usn/USN-2935-2
• ubuntu.com/usn/USN-2935-3
• bugzilla.redhat.com/show_bug.cgi
• security.gentoo.org/glsa/201605-05
• trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011 · Exploit
• trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238

linux-pam のその他の脆弱性

• CVE-2024-22365中 5.5linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat c…
• CVE-2022-28321緊急 9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't…
• CVE-2020-27780緊急 9.8A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't …
• CVE-2014-2583中 5.8Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users …
• CVE-2011-3149低 2.1The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when…