Medium severity · published Oct 23, 2024
CVE-2024-10041
Pam: libpam: libpam vulnerable to read hashed password
4.7
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Enterprise Linux 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9.4 Extended Update Support · Red Hat
All versions, or not specified · source: vendor
LI
Linux-pam · Linux-pam
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10041
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10041
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:10379
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:11250
access.redhat.com
https://access.redhat.com/errata/RHSA-2024:9941
Mitigation
https://access.redhat.com/security/cve/CVE-2024-10041
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2319212
More from Red Hat Enterprise Linux 7
10.0
CVE-2026-4692
Sandbox escape in the Responsive Design Mode component
10.0
CVE-2026-4689
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
10.0
CVE-2026-4688
Sandbox escape due to use-after-free in the Disability Access APIs component
10.0
CVE-2026-2778
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
10.0
CVE-2026-2776
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
