Approved changes feed: RSS · Atom

cpe:2.3:a:andries_brouwer:util-linux:2.11k:*:*:*:*:*:*:*

part: a version: 2.11k update: *

VendorAndries Brouwer (972c5fbe-6385-53f3-b328-d49c3bf5aaeb)
ProductUtil Linux (2d755adf-b00b-5f56-ac9a-632276ef4de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/util-linux purl2cpe 2026-06-01 10:12:45.514715
pkg:deb/ubuntu/util-linux purl2cpe 2026-06-01 10:12:45.514716
pkg:github/util-linux/util-linux purl2cpe 2026-06-01 10:12:45.514718
pkg:rpm/fedora/util-linux purl2cpe 2026-06-01 10:12:45.514719
pkg:rpm/opensuse/util-linux purl2cpe 2026-06-01 10:12:45.514721

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1147 vulnerable 2026-06-08 04:45:21.520927 Details available
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:44:08.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.