CVE-2018-17953

NONE EPSS 67.8%

Published Nov 27, 20187y ago · Modified Jun 17, 20262w ago

Published Nov 27, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).

Threat Intelligence

EPSS Exploit Probability

67.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-284

Affected Products 3

Vendor	Product	Version	Range
kernel	linux-pam	1.3.0	any
opensuse	leap	15.0	any
suse	linux_enterprise	15.0	any

References 1

bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1115640

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.