RHSA-2024:11250MediumCVSS 4.7

Red Hat Security Advisory: pam security update

Published
December 17, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2024-10041 →

📋 Description

CVE-2024-10041 — pam: libpam: Libpam vulnerable to read hashed password

🎯 Affected products37

  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-0:1.5.1-21.el9_5.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debuginfo-0:1.5.1-21.el9_5.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-debugsource-0:1.5.1-21.el9_5.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • pam-devel-0:1.5.1-21.el9_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • pam-devel-0:1.5.1-21.el9_5.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • +7 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: This vulnerability is mitigated if SELinux is in Enforcing mode. To verify if SELinux is in Enforcing mode, the output of the `getenforce` command will return `Enforcing', see the example below: ~~~ $ getenforce Enforcing ~~~ To more information about SELinux, specifically how to set it to Enforcing mode, see the links below. https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html-single/using_selinux/index#changing-to-enforcing-mode_changing-selinux-states-and-modes https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/using_selinux/index#changing-to-enforcing-mode_changing-selinux-states-and-modes

🔗 References (4)