Security Advisory

Authd PAM Security Update Advisory (CVE-2024-9313)

  • Oct 07 2024

Overview

 

An update has been released to address vulnerabilities in Authd PAM. Users of the affected versions are advised to update to the latest version.

 

Affected Products

CVE-2024-9313

  • Authd PAM module versions: ~ 0.3.5 (excluded)

 

 

Resolved Vulnerabilities

 

Vulnerability that allows a broker-managed user to impersonate another user managed by the same broker and perform all PAM operations, including authentication (CVE-2024-9313)

 

Vulnerability Patches

The following product-specific Vulnerability Patches have been made available with the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-9313

  • Authd PAM Module version: 0.3.5

     

 

References

 

[1] PAM module may allow accessing with the credentials of another user

https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787

Tags:

Previous Post

Next Post