USN-6588-1: PAM vulnerability
Matthias Gerstner discovered that the PAM pamnamespace module incorrectly handled special files when performing directory checks. A local attacker could possibly use this issue to cause PAM to stop responding, resulting in a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6588-1?
The severity of USN-6588-1 is categorized as a potential denial of service vulnerability.
How do I fix USN-6588-1?
To fix USN-6588-1, update the libpam-modules package to the recommended version based on your Ubuntu release.
What are the affected versions mentioned in USN-6588-1?
Affected versions in USN-6588-1 include libpam-modules versions up to 1.5.2-6ubuntu1.1 for Ubuntu 23.10, 1.5.2-5ubuntu1.1 for Ubuntu 23.04, and lower for earlier versions.
Who discovered the issue leading to USN-6588-1?
The issue leading to USN-6588-1 was discovered by Matthias Gerstner.
What component is primarily affected by the vulnerability in USN-6588-1?
The primary component affected by the vulnerability in USN-6588-1 is the PAM pam_namespace module.