Description
A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.
References
- GLSA-201402-12 vendor-advisory
Unscored
CVE-2013-4285
EUVD-2013-4183GHSA-q2cr-jgg8-wv9w
A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensiti…
Published Apr 28, 2014 · Updated Aug 6, 2024 · Assigned by redhat