CVE-2011-3148
EPSS 0.16%pam - several
Published: 7/22/2012Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-3148
Description
Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
Affected packages (2)
- Debian/pamfrom 0, < 1.1.3-5
- Debian/pamfrom 0, < 1.1.1-6.1+squeeze1