CVE-2024-22365

概要

参考情報

• openwall.com/lists/oss-security/2024/01/18/3 · Exploit
• linux-pam/linux-pam · Product
• linux-pam/linux-pam commit 031bb5a · Patch
• linux-pam/linux-pam release v1.6.0 · Release Notes
• lists.debian.org/debian-lts-announce/2025/09/msg00021.html
• cert-portal.siemens.com/productcert/html/ssa-577017.html
• cert-portal.siemens.com/productcert/html/ssa-794697.html

linux-pam のその他の脆弱性

• CVE-2022-28321緊急 9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't…
• CVE-2020-27780緊急 9.8A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't …
• CVE-2015-3238中 6.5The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, a…
• CVE-2014-2583中 5.8Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users …
• CVE-2011-3149低 2.1The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when…