Detections
Analytics

openSUSE Security Update : pam_pkcs11 (openSUSE-2018-1244)

medium Nessus Plugin ID 118380

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for pam_pkcs11 provides the following fixes :

Security issues fixed (bsc#1105012) :

 - Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability

 - Fixed a stack-based buffer overflow in opensshmapper.c

 - Make sure memory is properly cleaned before invoking free()

Other changes :

 - Add a systemd service file. (bsc#1049219)

This update was imported from the SUSE:SLE-12:Update update project.

Solution

Update the affected pam_pkcs11 packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1049219

https://bugzilla.opensuse.org/show_bug.cgi?id=1105012

Plugin Details

Severity: Medium

ID: 118380

File Name: openSUSE-2018-1244.nasl

Version: 1.3

Type: Local

Agent: unix

Published: 10/25/2018

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Vulnerability Information

CPE: cpe:/o:novell:opensuse:42.3, p-cpe:/a:novell:opensuse:pam_pkcs11-32bit, p-cpe:/a:novell:opensuse:pam_pkcs11-debuginfo-32bit, p-cpe:/a:novell:opensuse:pam_pkcs11-debuginfo, p-cpe:/a:novell:opensuse:pam_pkcs11-debugsource, p-cpe:/a:novell:opensuse:pam_pkcs11

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 10/24/2018