Beveiligingsadvies

CVE-2026-47274

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-27 20:02:38

Laatst bijgewerkt 2026-05-30 01:47:21

Toegewezen door GitHub_M

CVSS-score 6.3

Status PUBLISHED

Beschrijving

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb helper tools resolved external binaries through the PATH environment variable rather than using absolute paths. An attacker who can influence the process environment during PAM authentication or tool execution could substitute malicious binaries. The affected tools are pamusb-check (src/tmux.c), pamusb-conf (tools/pamusb-conf), and pamusb-keyring-unlock-gnome (tools/pamusb-keyring-unlock-gnome). This vulnerability is fixed in 0.9.0.

← Alle CVE's bekijken Bekijk op cve.org ↗