CVE-2022-28321
Critical
Description
The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLinux-pam
PublishedSep 19, 2022
First seenSep 19, 2022
Weakness typeCWE-287Improper authentication
How to fix
Update
- linux-pam linux-pam1.5.2-6.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux-pam linux-pam | v < 1.5.2-6.1 | 1.5.2-6.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.