Skip to content
OpenAdvisories
Medium ELSA-2015-1640 1 CVE

Moderate: pam security update (Oracle Linux 7)

Published Aug 18, 2015 · Updated Aug 18, 2015

Ecosystem: Oracle Linux

Summary

[1.1.1-20.1]
- fix CVE-2015-3238 - DoS due to blocking pipe with very long password

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 pam 0:1.1.8-12.el7_1.1
Oracle Linux · 7 pam-devel 0:1.1.8-12.el7_1.1

Vulnerabilities 1

  • Unscored —
    CVE-2015-3238

    The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directl…

    pam pam Debian Ubuntu