linux-pam linux-pam

Name: linux-pam linux-pam
Brand: linux-pam

productUS

cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical1high11medium3low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-2583US	medium5.8	4.11% (91st)	—	no fix	2014-04-10	= 1.1.8
CVE-2015-3238US	medium6.5	2.71% (86th)	—	no fix	2015-08-24	≤ 1.1.8
CVE-2020-27780US	critical9.8	1.96% (80th)	—	1.5.1	2020-12-18	1.5.0 → 1.5.1
CVE-2009-0887US	medium6.6	1.93% (80th)	—	no fix	2009-03-12	20 versions
CVE-2022-28321US	critical9.8	1.58% (75th)	—	1.5.2-6.1	2022-09-19	< 1.5.2-6.1
CVE-2011-3148US	medium4.6	0.70% (53rd)	—	no fix	2012-07-22	26 versions
CVE-2011-3149US	low2.1	0.53% (45th)	—	no fix	2012-07-22	26 versions
CVE-2024-22365US	medium5.5	0.46% (40th)	—	1.6.0	2024-02-06	< 1.6.0
CVE-2010-3853US	medium6.9	0.41% (35th)	—	no fix	2011-01-24	24 versions
CVE-2010-4708US	high7.2	0.37% (31st)	—	no fix	2011-01-24	24 versions
CVE-2010-4706US	medium4.9	0.37% (31st)	—	no fix	2011-01-24	24 versions
CVE-2010-3316US	low3.3	0.36% (30th)	—	no fix	2011-01-24	23 versions
CVE-2010-4707US	medium4.9	0.36% (30th)	—	no fix	2011-01-24	24 versions
CVE-2010-3435US	medium4.7	0.35% (29th)	—	no fix	2011-01-24	23 versions
CVE-2010-3431US	low1.9	0.35% (28th)	—	no fix	2011-01-24	= 1.1.2
CVE-2009-0579US	medium4.6	0.35% (28th)	—	no fix	2009-04-16	21 versions
CVE-2010-3430US	medium4.7	0.34% (27th)	—	no fix	2011-01-24	= 1.1.2
CVE-2024-10041US	—	0.27% (18th)	—	no fix	2024-10-23	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-189CWE-1891 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.