The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pam | Jul 30, 2024 | May 8, 2014 |
| Gentoo Linux | — | Upgrade sys-libs/pam. | Oct 30, 2017 | May 8, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 4, 2013 |
| Suse | — | Upgrade pam-devel-32bitUpgrade pam-32bitUpgrade pam-develUpgrade pam-x86Upgrade pam-docUpgrade pam | Apr 26, 2018 | May 8, 2014 |
| Ubuntu | — | Upgrade libpam-modules | Mar 22, 2016 | May 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub