Known vulnerabilities in linux-pam

Known vulnerabilities in linux-pam

Vendor: git.kernel.org

Software: linux-pam

Software CPE: cpe:2.3:a:git.kernel.org:linux-pam:*:*:*:*:*:*:*:*

Website: https://git.kernel.org

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114769 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-8941	CWE-59	Low	No	No	-	03.09.2025	SB2025090350 SB2025090372 SB2025090373 and 20 more
#VU111389 - Improper Access Control CVE-2025-6020	CWE-284	Low	No	No	1.7.1	19.06.2025	SB2025061987 SB2025061992 SB20250619103 and 69 more
#VU100997 - Insecure Storage of Sensitive Information CVE-2024-10041	CWE-922	Low	No	No	1.7.0	27.11.2024	SB2024112540 SB2024112747 SB2024112748 and 38 more
#VU100912 - Improper Authentication CVE-2024-10963	CWE-287	Medium	No	No	1.7.0	25.11.2024	SB2024112540 SB2024112541 SB2024112542 and 56 more
#VU85552 - Resource exhaustion CVE-2024-22365	CWE-400	Low	No	No	1.6.0	17.01.2024	SB2024011799 SB20240117126 SB2024011839 and 44 more
#VU71525 - Incorrect Authorization CVE-2022-28321	CWE-863	Medium	No	No	1.5.2	25.01.2023	SB2023012531 SB2023012533 SB2023020603 and 2 more
#VU48796 - Improper Authentication CVE-2020-27780	CWE-287	Medium	No	No	1.5.1	07.12.2020	SB2020120707 SB2020120708 SB2020120913 and 3 more
#VU32409 - Exposure of sensitive information to an unauthorized actor CVE-2015-3238	CWE-200	Medium	No	No	1.2.1	24.08.2015	SB2015082413 SB2015060512 SB2015090210 and 3 more
#VU41841 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2014-2583	CWE-22	Medium	No	No	-	10.04.2014	SB2014041004
#VU43802 - Stack-based buffer overflow CVE-2011-3148	CWE-121	Low	No	No	1.1.5	22.07.2012	SB2012072205 SB2011110307 SB2011110308 and 3 more
#VU43803 - Memory corruption CVE-2011-3149	CWE-119	Low	No	No	1.1.5	22.07.2012	SB2012072205 SB2011110307 SB2011110308 and 3 more
#VU45410 - Improper input validation CVE-2010-4708	CWE-20	High	No	No	-	24.01.2011	SB2011012401 SB2012062502
#VU45411 - Improper input validation CVE-2010-4706	CWE-20	Medium	No	No	-	24.01.2011	SB2011012401 SB2012062502
#VU45412 - Resource Management Errors CVE-2010-4707	CWE-399	Medium	No	No	-	24.01.2011	SB2011012401 SB2012062502
#VU45413 - Improper input validation CVE-2010-3435	CWE-20	Medium	No	No	-	24.01.2011	SB2011012402 SB2012062502
#VU45414 - Improper input validation CVE-2010-3853	CWE-20	High	No	No	-	24.01.2011	SB2011012401 SB2012062502
#VU45415 - Improper input validation CVE-2010-3316	CWE-20	Medium	No	No	-	24.01.2011	SB2011012402 SB2011110307 SB2011110308 and 2 more
#VU45416 - Improper input validation CVE-2010-3430	CWE-20	Medium	No	No	-	24.01.2011	SB2011012403 SB2012062502
#VU45417 - Improper input validation CVE-2010-3431	CWE-20	Low	No	No	-	24.01.2011	SB2011012403 SB2012062502