What is CVE-2018-17953?

CVE-2018-17953 is a high-severity vulnerability in Kernel Linux-Pam, classified under Improper Access Control. CVSS score: 7.5/10. Published 2018-11-27.

How severe is CVE-2018-17953?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Kernel Linux-Pam

CVE-2018-17953

A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).

EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Kernel Linux-pam — versions 1.3.0
Opensuse Leap — versions 15.0
Suse Linux_enterprise — versions 15.0
Suse Pam — versions 1.3.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-17953?: CVE-2018-17953 is a high-severity vulnerability in Kernel Linux-Pam, classified under Improper Access Control. CVSS score: 7.5/10. Published 2018-11-27.
How severe is CVE-2018-17953?: High severity. CVSS v3 base score is 7.5 out of 10.