A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-devel | Dec 4, 2024 | Nov 7, 2024 |
| Debian | — | Upgrade pam | Jul 27, 2026 | Jul 27, 2026 |
| Gentoo Linux | — | Upgrade sys-libs/pam. | Aug 7, 2025 | Aug 6, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Mar 18, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Feb 11, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | Feb 11, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pam | Mar 18, 2025 | Nov 7, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jul 9, 2025 |
| Oracle_linux | — | Upgrade pam-docsUpgrade pam-develUpgrade pam | Nov 26, 2024 | Nov 7, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Dec 4, 2024 | Nov 7, 2024 |
| Redhat_linux | — | Upgrade pam-debuginfoUpgrade pamUpgrade pam-develUpgrade pam-debugsourceUpgrade pam-docs | Feb 10, 2025 | Nov 7, 2024 |
| Rocky_linux | — | Upgrade pam-debuginfoUpgrade pam-develUpgrade pam-debugsourceUpgrade pam-docsUpgrade pam | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade pam-extraUpgrade pam-manpagesUpgrade pam-develUpgrade pamUpgrade pam-doc | Dec 5, 2025 | Nov 27, 2024 |
| Ubuntu | — | Upgrade libpam-modules | Jun 26, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub