https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:39:52 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:10244 <p><strong>Affected:</strong> AlmaLinux:9: pam, AlmaLinux:9: pam-devel, AlmaLinux:9: pam-docs</p> <p>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.</p> <p>Security Fix(es):</p> <p>* pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: pam, AlmaLinux:9: pam-devel, AlmaLinux:9: pam-docs</p> <p>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.</p> <p>Security Fix(es):</p> <p>* pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:10244 https://cve.radiocsirt.org/vuln/bdu:2025-02448 bdu:2025-02448 https://cve.radiocsirt.org/vuln/bdu:2025-02448 https://cve.radiocsirt.org/vuln/bell-cve-2024-10963 <p><strong>Affected:</strong> Alpaquita:stream: linux-pam</p> <p><strong>Affected:</strong> Alpaquita:stream: linux-pam</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-10963 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081 certfr-2024-avi-1081 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081 https://cve.radiocsirt.org/vuln/euvd-2026-361946 EUVD-2026-361946 https://cve.radiocsirt.org/vuln/euvd-2026-361946 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10963 <p>A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.</p> <p>A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10963 https://cve.radiocsirt.org/vuln/ghsa-rw99-6hrh-fmjr <p>A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.</p> <p>A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.</p> https://cve.radiocsirt.org/vuln/ghsa-rw99-6hrh-fmjr https://cve.radiocsirt.org/vuln/msrc_cve-2024-10963 msrc_CVE-2024-10963 https://cve.radiocsirt.org/vuln/msrc_cve-2024-10963 https://cve.radiocsirt.org/vuln/oesa-2024-2501 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: pam, openEuler:24.03-LTS: pam, openEuler:22.03-LTS-SP4: pam, openEuler:22.03-LTS-SP3: pam, openEuler:20.03-LTS-SP4: pam</p> <p>PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system. Security Fix(es): A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.(CVE-2024-10963)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: pam, openEuler:24.03-LTS: pam, openEuler:22.03-LTS-SP4: pam, openEuler:22.03-LTS-SP3: pam, openEuler:20.03-LTS-SP4: pam</p> <p>PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system. Security Fix(es): A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.(CVE-2024-10963)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2501 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14563-1 <p>pam-1.7.0-2.1 on GA media</p> <p>pam-1.7.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14563-1 https://cve.radiocsirt.org/vuln/rhsa-2024:10232 <p>pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass</p> <p>pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10232 https://cve.radiocsirt.org/vuln/suse-su-2025:20104-1 <p>Security update for pam</p> <p>Security update for pam</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20104-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10963 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: pam</p> <p>A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: pam</p> <p>A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10963 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3543 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3543