Skip to content
OpenAdvisories
Unscored RHSA-2013:0521 2 CVEs

Red Hat Security Advisory: pam security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client pam 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::client pam-debuginfo 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::client pam-devel 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode pam 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode pam-debuginfo 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode pam-devel 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::server pam 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::server pam-debuginfo 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::server pam-devel 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pam 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pam-debuginfo 0:1.1.1-13.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pam-devel 0:1.1.1-13.el6

Vulnerabilities 2

  • Unscored —
    CVE-2011-3148

    Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1…

    pam Debian
  • Unscored —
    CVE-2011-3149

    The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not…

    pam Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/pam.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=588893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=673398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=723297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=746619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=746620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=811168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=811243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815516
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0521.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3148
  • report
    https://access.redhat.com/security/cve/CVE-2011-3149
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3149