PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions     0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked     for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer     pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer     happens to have the value 3 most of the time when running sudo and as such it will segfault. The most     likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM     crashing. As of time of publication, a patch for the issue is unavailable. (CVE-2025-24031)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0689-1 advisory.

    - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062).
    - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for     PIN leads to       crash (bsc#1237058).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0688-1 advisory.

    - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062).
    - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for     PIN leads to       crash (bsc#1237058).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256737	Linux Distros Unpatched Vulnerability : CVE-2025-24031	Nessus	Misc.	high
216733	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_pkcs11 (SUSE-SU-2025:0689-1)	Nessus	SuSE Local Security Checks	critical
216720	SUSE SLES12 Security Update : pam_pkcs11 (SUSE-SU-2025:0688-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2025-24031

medium

Tenable Plugins

high

critical

critical