https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:17:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214375 EUVD-2026-214375 https://cve.radiocsirt.org/vuln/euvd-2026-214375 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24031 <p>PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.</p> <p>PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24031 https://cve.radiocsirt.org/vuln/suse-su-2025:0688-1 <p>Security update for pam_pkcs11</p> <p>Security update for pam_pkcs11</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0688-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24031 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pam-pkcs11, Ubuntu:Pro:18.04:LTS: pam-pkcs11, Ubuntu:20.04:LTS: pam-pkcs11, Ubuntu:22.04:LTS: pam-pkcs11, Ubuntu:24.04:LTS: pam-pkcs11, Ubuntu:25.10: pam-pkcs11, Ubuntu:26.04:LTS: pam-pkcs11</p> <p>PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pam-pkcs11, Ubuntu:Pro:18.04:LTS: pam-pkcs11, Ubuntu:20.04:LTS: pam-pkcs11, Ubuntu:22.04:LTS: pam-pkcs11, Ubuntu:24.04:LTS: pam-pkcs11, Ubuntu:25.10: pam-pkcs11, Ubuntu:26.04:LTS: pam-pkcs11</p> <p>PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24031