CVE-2011-3149
EPSS 0.06%Published: 7/22/2012Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-3149
Description
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
Affected packages (1)
- Debian/pamfrom 0, < 1.1.3-5