CVE-2015-3238
Fixed in a distro release EPSS 3%
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
Products: linux-pam, oracle sparc-opl_service_processor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pam | 1.1.8-3.2 |
| Debian 13 | pam | 1.1.8-3.2 |
| Debian 14 | pam | 1.1.8-3.2 |
| Red Hat Enterprise Linux 6 | pam | 0:1.1.1-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | pam-debuginfo | 0:1.1.1-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | pam-devel | 0:1.1.1-20.el6_7.1 |
| Red Hat Enterprise Linux 7 | pam | 0:1.1.8-12.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | pam | 0:1.1.8-12.el7_1.1 |
| Red Hat Enterprise Linux 7 | pam-debuginfo | 0:1.1.8-12.el7_1.1 |
| Red Hat Enterprise Linux 7 | pam-debuginfo | 0:1.1.8-12.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | pam-devel | 0:1.1.8-12.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | pam-devel | 0:1.1.8-12.el7_1.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Server 11 SP4 | pam | 1.1.5-0.17.2 |
| SUSE Linux Enterprise Server 12 SP1 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Server 12 SP2 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | pam | 1.1.5-0.17.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | pam | 1.1.5-0.17.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | pam | 1.1.8-23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | pam | 1.1.8-23.1 |
| Ubuntu 14.04 LTS | pam | 1.1.8-1ubuntu2.1 |
| Ubuntu 16.04 LTS | pam | 1.1.8-3.2ubuntu2 |
| openSUSE Tumbleweed | pam | 1.3.0-3.4 |