Skip to content
OpenAdvisories
Medium DSA-4025-1 1 CVE

libpam4j - security update

Published Nov 8, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 libpam4j 1.4-2+deb8u1
Debian · 9 libpam4j 1.4-2+deb9u1

Vulnerabilities 1

  • Medium 6.5
    CVE-2017-12197

    Improper Input Validation in libpam4j

    It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security restrictions and possibly access sensitive information.

    Red Hat libpam4j org.kohsuke:libpam4j libpam4j Ubuntu Maven