Login Request a demo
LI
Product
Linux-PAM
by Linux-PAM · last CVE Jun 14, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 2High 0Medium 4Low 0
Severity
All severities19Critical2High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Linux-PAM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-3238
6.5
3%
Aug 24
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate…
Affected: through 1.1.8
CVE-2026-54411
5.9
0%
Jun 14
Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison
Affected: through 1.7.2
CVE-2024-22365
5.5
0%
Feb 6
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY
Affected: before 1.6.0
CVE-2024-10041
4.7
0%
Oct 23
Pam: libpam: libpam vulnerable to read hashed password
Affected: All versions, or not specified
Showing 4