Advisories · Technology
mcdope pam_usb.
Every CVE that names mcdope pam_usb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic
- mcdope pam_usb
- CWE-454
- CWE-807
- CVSS 5.8 Medium
pam_usb: TOCTOU race condition in pad directory creation allows symlink substitution
- mcdope pam_usb
- Race condition
- CVSS 5.8 Medium
pam_usb: Missing O_EXCL on pad temp file creation allows concurrent update race
- mcdope pam_usb
- Race condition
- CVSS 6.7 Medium
pam_usb: xmlReadFile flags=0 permits XXE network entity fetching in conf.c
- mcdope pam_usb
- XML external entities (XXE)
- CVSS 5.5 Medium
pam_usb: NULL Dereference Crash in pusb_is_loginctl_local when loginctl Returns Empty Remote Field
- mcdope pam_usb
- Memory corruption
- CVSS 4.7 Medium
pam_usb: Infinite loop DoS in process-tree walk when parent process exits during authentication
- mcdope pam_usb
- Denial of service
- CVSS 4.7 Medium
pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap
- mcdope pam_usb
- CWE-14
- CWE-226
- CVSS 8.2 High
pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent
- mcdope pam_usb
- Command injection
- CVSS 7.8 High
pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution
- mcdope pam_usb
- Command injection
- CVSS 4.6 Medium
pam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service
- mcdope pam_usb
- Memory corruption
- CVSS 7.9 High
pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption
- mcdope pam_usb
- Path traversal
- Authentication bypass
- CVSS 8.8 High
pam_usb: Command injection via $TMUX environment variable leads to RCE as root
- mcdope pam_usb
- Command injection
- CWE-116
- CVSS 7.4 High
pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local
- mcdope pam_usb
- Broken access control
- CVSS 6.3 Medium
pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result
- mcdope pam_usb
- Race condition
- CVSS 5.1 Medium
pam_usb: OOM guards removed by -DNDEBUG cause NULL dereference and authentication process crash
- mcdope pam_usb
- Memory corruption
- CVSS 7.1 High
pam_usb: OTP pad authentication bypass via missing system pad check and uninitialized RNG buffer
- mcdope pam_usb
- Authentication bypass
- Memory corruption
- CVSS 6.5 Medium
pam_usb: XPath injection via PAM-supplied identifiers in pam_usb configuration queries
- mcdope pam_usb
- Other injection
- CVSS 6.3 Medium
pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation
- mcdope pam_usb
- CWE-427
- CVSS 8.1 High
pam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass
- mcdope pam_usb
- Broken access control
- CVSS 6.7 Medium
pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets
- mcdope pam_usb
- Memory corruption
- CVSS 5.7 Medium
pam_usb: Thread-unsafe static pointer in log.c causes data race under concurrent PAM authentication
- mcdope pam_usb
- Race condition
- Memory corruption
- CVSS 4.4 Medium
pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution
- mcdope pam_usb
- CWE-390
- CWE-693