Skip to content
OpenAdvisories
Critical DLA-4058-1 1 CVE

pam-pkcs11 - security update

Published Feb 18, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 pam-pkcs11 0.6.11-4+deb11u1

Vulnerabilities 1

  • Critical 9.2
    CVE-2025-24032

    PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)

    PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check if the user is capable of logging into the token. An attacker…

    OpenSC pam_pkcs11 pam-pkcs11 pam-pkcs11 Debian Ubuntu