A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-devel | Dec 4, 2024 | Nov 7, 2024 |
| Debian | — | Upgrade pam | Jul 27, 2026 | Jul 27, 2026 |
| Gentoo Linux | — | Upgrade sys-libs/pam. | Aug 7, 2025 | Aug 6, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Mar 18, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Feb 11, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | Feb 11, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pam | Mar 18, 2025 | Nov 7, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jul 9, 2025 |
| Oracle_linux | — | Upgrade pamUpgrade pam-develUpgrade pam-docs | Nov 26, 2024 | Nov 7, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Dec 4, 2024 | Nov 7, 2024 |
| Redhat_linux | — | Upgrade pam-docsUpgrade pam-debugsourceUpgrade pam-debuginfoUpgrade pam-develUpgrade pam | Feb 10, 2025 | Nov 7, 2024 |
| Rocky_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-develUpgrade pam-debuginfoUpgrade pam-debugsource | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade pam-manpagesUpgrade pam-docUpgrade pamUpgrade pam-develUpgrade pam-extra | Dec 5, 2025 | Nov 27, 2024 |
| Ubuntu | — | Upgrade libpam-modules | Jun 26, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub