Vulnerability · Published Oct 23, 2024 · Assigned by redhat
CVE-2024-10041Pam: libpam: libpam vulnerable to read hashed password
Medium 4.7
In plain English
A medium-severity security flaw in pam. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | pam | 1.3.1-36.el8_10 | ALSA-2024:10379 |
| AlmaLinux:9 | pam | 1.5.1-21.el9_5 | ALSA-2024:11250 |
| AlmaLinux:8 | pam-devel | 1.3.1-36.el8_10 | ALSA-2024:10379 |
| AlmaLinux:9 | pam-devel | 1.5.1-21.el9_5 | ALSA-2024:11250 |
| AlmaLinux:9 | pam-docs | 1.5.1-21.el9_5 | ALSA-2024:11250 |
| Debian:12 | pam | no fix listed | DEBIAN-CVE-2024-10041 |
| Debian:13 | pam | 1.7.0-2 | DEBIAN-CVE-2024-10041 |
| Debian:14 | pam | 1.7.0-2 | DEBIAN-CVE-2024-10041 |
| Rocky Linux:8 | pam | 0:1.3.1-36.el8_10 | RLSA-2024:10379 |
| Ubuntu:22.04:LTS | pam | no fix listed | UBUNTU-CVE-2024-10041 |
| Ubuntu:24.04:LTS | pam | no fix listed | UBUNTU-CVE-2024-10041 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| pam | 1.6.0 – before 1.6.0 | |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-922 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- RHSA-2024:10379 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:11250 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:9941 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-10041 vdb-entry, x_refsource_REDHAT
- RHBZ#2319212 issue-tracking, x_refsource_REDHAT