Moderate: pam security update
Summary
ALSA-2024:3163: Moderate: pam security update. Affects pam versions < 1.3.1-33.el8. Fixed in 1.3.1-33.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. PAM is a critical component of the AlmaLinux:8 ecosystem.
Vulnerability Detail
The vulnerability (CVE-2024-22365) allows an unprivileged user to block another user namespace. This can potentially lead to denial of service attacks or unauthorized access to resources.
How To Fix
Minimum fixed version
1.3.1-33.el8
This is the first release that contains the fix.
sudo dnf update pamTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible.
Conclusion
It is crucial to update the affected packages to address this vulnerability. Failure to do so may result in denial of service attacks or unauthorized access to resources. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pam →
FAQ
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
The vulnerability allows an unprivileged user to block another user namespace, potentially leading to denial of service attacks or unauthorized access to resources.
To fix this vulnerability, update the affected packages to version 1.3.1-33.el8 or later.
There is no known workaround for this vulnerability. It is essential to apply the security update.
You can find more information about this vulnerability in the CVE page(s) listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for pam.
