Threats affecting pkg:rpm/redhat/pam

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A moderate severity vulnerability (CVE-2024-22365) exists in Pluggable Authentication Modules (PAM) for Red Hat Enterprise Linux 9. This flaw allows an unprivileged user to block another user namespace due to improper access control. Red Hat has released security updates addressing this issue in Red Hat Enterprise Linux 9.4 and related extended update support versions. PAM manages authentication policies without requiring program recompilation. The vulnerability is related to CWE-277 (improper access control).