SUSE-SU-2016:1645-1

Vulnerability from csaf_suse - Published: 2016-06-21 10:32 - Updated: 2016-06-21 10:32
Summary
Security update for pam

Notes

Title of the patch
Security update for pam
Description of the patch
This update for pam fixes two security issues. These security issues were fixed: - CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920). - CVE-2013-7041: Compare password hashes case-sensitively (bsc#854480). This non-security issue was fixed: - bsc#962220: Don't fail when /var/log/btmp is corrupted
Patchnames
sdksp4-pam-12624,slessp4-pam-12624
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for pam",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for pam fixes two security issues.\n\nThese security issues were fixed:\n- CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920).\n- CVE-2013-7041: Compare password hashes case-sensitively (bsc#854480).\n\nThis non-security issue was fixed:\n- bsc#962220: Don\u0027t fail when /var/log/btmp is corrupted\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-pam-12624,slessp4-pam-12624",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1645-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1645-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161645-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1645-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002134.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 854480",
        "url": "https://bugzilla.suse.com/854480"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 934920",
        "url": "https://bugzilla.suse.com/934920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962220",
        "url": "https://bugzilla.suse.com/962220"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-7041 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-7041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3238 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3238/"
      }
    ],
    "title": "Security update for pam",
    "tracking": {
      "current_release_date": "2016-06-21T10:32:29Z",
      "generator": {
        "date": "2016-06-21T10:32:29Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1645-1",
      "initial_release_date": "2016-06-21T10:32:29Z",
      "revision_history": [
        {
          "date": "2016-06-21T10:32:29Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam-devel-1.1.5-0.17.2.i586",
                "product": {
                  "name": "pam-devel-1.1.5-0.17.2.i586",
                  "product_id": "pam-devel-1.1.5-0.17.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "pam-1.1.5-0.17.2.i586",
                "product": {
                  "name": "pam-1.1.5-0.17.2.i586",
                  "product_id": "pam-1.1.5-0.17.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "pam-doc-1.1.5-0.17.2.i586",
                "product": {
                  "name": "pam-doc-1.1.5-0.17.2.i586",
                  "product_id": "pam-doc-1.1.5-0.17.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam-devel-1.1.5-0.17.2.ia64",
                "product": {
                  "name": "pam-devel-1.1.5-0.17.2.ia64",
                  "product_id": "pam-devel-1.1.5-0.17.2.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-1.1.5-0.17.2.ia64",
                "product": {
                  "name": "pam-1.1.5-0.17.2.ia64",
                  "product_id": "pam-1.1.5-0.17.2.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-doc-1.1.5-0.17.2.ia64",
                "product": {
                  "name": "pam-doc-1.1.5-0.17.2.ia64",
                  "product_id": "pam-doc-1.1.5-0.17.2.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-x86-1.1.5-0.17.2.ia64",
                "product": {
                  "name": "pam-x86-1.1.5-0.17.2.ia64",
                  "product_id": "pam-x86-1.1.5-0.17.2.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam-devel-1.1.5-0.17.2.ppc64",
                "product": {
                  "name": "pam-devel-1.1.5-0.17.2.ppc64",
                  "product_id": "pam-devel-1.1.5-0.17.2.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-devel-32bit-1.1.5-0.17.2.ppc64",
                "product": {
                  "name": "pam-devel-32bit-1.1.5-0.17.2.ppc64",
                  "product_id": "pam-devel-32bit-1.1.5-0.17.2.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-1.1.5-0.17.2.ppc64",
                "product": {
                  "name": "pam-1.1.5-0.17.2.ppc64",
                  "product_id": "pam-1.1.5-0.17.2.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-32bit-1.1.5-0.17.2.ppc64",
                "product": {
                  "name": "pam-32bit-1.1.5-0.17.2.ppc64",
                  "product_id": "pam-32bit-1.1.5-0.17.2.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-doc-1.1.5-0.17.2.ppc64",
                "product": {
                  "name": "pam-doc-1.1.5-0.17.2.ppc64",
                  "product_id": "pam-doc-1.1.5-0.17.2.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam-devel-1.1.5-0.17.2.s390x",
                "product": {
                  "name": "pam-devel-1.1.5-0.17.2.s390x",
                  "product_id": "pam-devel-1.1.5-0.17.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "pam-devel-32bit-1.1.5-0.17.2.s390x",
                "product": {
                  "name": "pam-devel-32bit-1.1.5-0.17.2.s390x",
                  "product_id": "pam-devel-32bit-1.1.5-0.17.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "pam-1.1.5-0.17.2.s390x",
                "product": {
                  "name": "pam-1.1.5-0.17.2.s390x",
                  "product_id": "pam-1.1.5-0.17.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "pam-32bit-1.1.5-0.17.2.s390x",
                "product": {
                  "name": "pam-32bit-1.1.5-0.17.2.s390x",
                  "product_id": "pam-32bit-1.1.5-0.17.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "pam-doc-1.1.5-0.17.2.s390x",
                "product": {
                  "name": "pam-doc-1.1.5-0.17.2.s390x",
                  "product_id": "pam-doc-1.1.5-0.17.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam-devel-1.1.5-0.17.2.x86_64",
                "product": {
                  "name": "pam-devel-1.1.5-0.17.2.x86_64",
                  "product_id": "pam-devel-1.1.5-0.17.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-devel-32bit-1.1.5-0.17.2.x86_64",
                "product": {
                  "name": "pam-devel-32bit-1.1.5-0.17.2.x86_64",
                  "product_id": "pam-devel-32bit-1.1.5-0.17.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-1.1.5-0.17.2.x86_64",
                "product": {
                  "name": "pam-1.1.5-0.17.2.x86_64",
                  "product_id": "pam-1.1.5-0.17.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-32bit-1.1.5-0.17.2.x86_64",
                "product": {
                  "name": "pam-32bit-1.1.5-0.17.2.x86_64",
                  "product_id": "pam-32bit-1.1.5-0.17.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "pam-doc-1.1.5-0.17.2.x86_64",
                "product": {
                  "name": "pam-doc-1.1.5-0.17.2.x86_64",
                  "product_id": "pam-doc-1.1.5-0.17.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-1.1.5-0.17.2.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586"
        },
        "product_reference": "pam-devel-1.1.5-0.17.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-devel-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-devel-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-devel-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-devel-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-32bit-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-devel-32bit-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-32bit-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-devel-32bit-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-devel-32bit-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-devel-32bit-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586"
        },
        "product_reference": "pam-1.1.5-0.17.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-x86-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-x86-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586"
        },
        "product_reference": "pam-1.1.5-0.17.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-32bit-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-32bit-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-doc-1.1.5-0.17.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64"
        },
        "product_reference": "pam-doc-1.1.5-0.17.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam-x86-1.1.5-0.17.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64"
        },
        "product_reference": "pam-x86-1.1.5-0.17.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-7041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-7041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-7041",
          "url": "https://www.suse.com/security/cve/CVE-2013-7041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123794 for CVE-2013-7041",
          "url": "https://bugzilla.suse.com/1123794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1215217 for CVE-2013-7041",
          "url": "https://bugzilla.suse.com/1215217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 854480 for CVE-2013-7041",
          "url": "https://bugzilla.suse.com/854480"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-21T10:32:29Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-7041"
    },
    {
      "cve": "CVE-2015-3238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3238",
          "url": "https://www.suse.com/security/cve/CVE-2015-3238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123794 for CVE-2015-3238",
          "url": "https://bugzilla.suse.com/1123794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934920 for CVE-2015-3238",
          "url": "https://bugzilla.suse.com/934920"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-32bit-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-doc-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:pam-x86-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-1.1.5-0.17.2.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:pam-devel-32bit-1.1.5-0.17.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-21T10:32:29Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3238"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.