| Package | Affected versions | Patched versions |
|---|---|---|
| linux-pam | = 0.99.1.0= 0.99.10.0= 0.99.2.0= 0.99.2.1= 0.99.3.0= 0.99.4.0= 0.99.5.0= 0.99.6.0= 0.99.6.1= 0.99.6.2= 0.99.6.3= 0.99.7.0= 0.99.7.1= 0.99.8.0= 0.99.8.1= 0.99.9.0= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1.0= 1.1.1≤ 1.1.2 |
pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free