Skip to content
OpenAdvisories

Vendor

Linux-PAM

1 known vulnerabilities.

Products

Linux-PAM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-54411

    Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison

    Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authenticati…

    Linux-PAM Linux-PAM pam pam Linux Debian Ubuntu