Summary
USN-6588-1 fixed a vulnerability in PAM. This update
provides the corresponding updates for Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
Original advisory details:
Matthias Gerstner discovered that the PAM pam_namespace module incorrectly
handled special files when performing directory checks. A local attacker
could possibly use this issue to cause PAM to stop responding, resulting in
a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | pam | 1.1.8-1ubuntu2.2+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | pam | 1.1.8-3.2ubuntu2.3+esm5 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | pam | 1.1.8-3.6ubuntu2.18.04.6+esm1 |
Vulnerabilities 1
-
Medium 5.5
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…
References
-
report
https://ubuntu.com/security/CVE-2024-22365