linux-pam linux-pam CVE-2015-3238 in Linux Pam and Oracle Products
Published on August 24, 2015

product logo product logo
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2015-3238

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2015-3238 are published in these products:

 
 

Exploit Probability

EPSS
3.61%
Percentile
87.55%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.