https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:07:14 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:10027 <p><strong>Affected:</strong> AlmaLinux:8: pam, AlmaLinux:8: pam-devel</p> <p>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.</p> <p>Security Fix(es):</p> <p>* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: pam, AlmaLinux:8: pam-devel</p> <p>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.</p> <p>Security Fix(es):</p> <p>* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:10027 https://cve.radiocsirt.org/vuln/bdu:2025-07273 bdu:2025-07273 https://cve.radiocsirt.org/vuln/bdu:2025-07273 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-373005 EUVD-2026-373005 https://cve.radiocsirt.org/vuln/euvd-2026-373005 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6020 <p>A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.</p> <p>A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6020 https://cve.radiocsirt.org/vuln/icsa-26-134-16 <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> https://cve.radiocsirt.org/vuln/icsa-26-134-16 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6020 msrc_CVE-2025-6020 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6020 https://cve.radiocsirt.org/vuln/ncsc-2026-0147 NCSC-2026-0147 https://cve.radiocsirt.org/vuln/ncsc-2026-0147 https://cve.radiocsirt.org/vuln/oesa-2025-1743 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: pam</p> <p>PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system. Security Fix(es):</p> <p>Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: pam</p> <p>PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system. Security Fix(es):</p> <p>Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1743 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15256-1 <p>pam-1.7.1-1.1 on GA media</p> <p>pam-1.7.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15256-1 https://cve.radiocsirt.org/vuln/rhsa-2025:10024 <p>linux-pam: Linux-pam directory Traversal</p> <p>linux-pam: Linux-pam directory Traversal</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10024 https://cve.radiocsirt.org/vuln/ssa-577017 <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> https://cve.radiocsirt.org/vuln/ssa-577017 https://cve.radiocsirt.org/vuln/suse-su-2025:20427-1 <p>Security update for pam</p> <p>Security update for pam</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20427-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6020 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: pam, Ubuntu:Pro:16.04:LTS: pam, Ubuntu:Pro:18.04:LTS: pam, Ubuntu:Pro:20.04:LTS: pam, Ubuntu:22.04:LTS: pam, Ubuntu:24.04:LTS: pam, Ubuntu:25.10: pam</p> <p>A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: pam, Ubuntu:Pro:16.04:LTS: pam, Ubuntu:Pro:18.04:LTS: pam, Ubuntu:Pro:20.04:LTS: pam, Ubuntu:22.04:LTS: pam, Ubuntu:24.04:LTS: pam, Ubuntu:25.10: pam</p> <p>A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6020 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1339 <p>Ein lokaler Angreifer kann eine Schwachstelle in PAM ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in PAM ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1339