Linux-PAM 0.99.3.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*

part: a version: 0.99.3.0 update: *

VendorLinux Pam (c0f5cb4e-4d30-57e6-951a-93362a4cf001)
ProductLinux Pam (30bc68b0-352b-5c87-8841-8b200e9488f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/linux-pam/linux-pam purl2cpe 2026-06-01 10:16:34.554994

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3149 vulnerable 2026-06-08 04:58:10.776628 Details available
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
Published: 2012-07-22T17:00:00.000Z
Updated: 2024-08-06T23:22:27.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3148 vulnerable 2026-06-08 04:58:10.764170 Details available
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
Published: 2012-07-22T17:00:00.000Z
Updated: 2024-08-06T23:22:27.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4708 vulnerable 2026-06-08 04:56:30.366488 Details available
The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.
Published: 2011-01-24T18:00:00.000Z
Updated: 2024-08-07T03:55:34.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4707 vulnerable 2026-06-08 04:56:30.365617 Details available
The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service (resource consumption) via a special file.
Published: 2011-01-24T18:00:00.000Z
Updated: 2024-08-07T03:55:34.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4706 vulnerable 2026-06-08 04:56:30.354575 Details available
The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.
Published: 2011-01-24T18:00:00.000Z
Updated: 2024-08-07T03:55:35.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3853 vulnerable 2026-06-08 04:55:17.586125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3435 vulnerable 2026-06-08 04:55:14.652574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3316 vulnerable 2026-06-08 04:55:14.140186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0887 vulnerable 2026-06-08 04:51:11.898551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0579 vulnerable 2026-06-08 04:51:10.130677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.