Description
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pam | 0.99.7.1-2 | — |
| Debian 13 | pam | 0.99.7.1-2 | — |
| Debian 12 | pam | 0.99.7.1-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | pam +1 | 0.77-66.13 | RHSA-2005:805 |
Advisories 1
- RHSA-2005:805 Red Hat Security Advisory: pam security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 17346 third-party-advisory
- RHSA-2005:805 vendor-advisory
- 17352 third-party-advisory
- ADV-2005-2227 vdb-entry
- 1015111 vdb-entry
- oval:org.mitre.oval:def:10193 vdb-entry signature
- http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup
- 17350 third-party-advisory
- 17365 third-party-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168181
- 15217 vdb-entry
- GLSA-200510-22 vendor-advisory