SUSE-SU-2016:1645-1: pam&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
CVSS: UnknownPublished
Published 21-06-2016Last modified 04-02-2026
Vulnerability summary
SUSE-SU-2016:1645-1 is a vulnerability in pam&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 21-06-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for pam This update for pam fixes two security issues. These security issues were fixed: - CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920). - CVE-2013-7041: Compare password hashes case-sensitively (bsc#854480). This non-security issue was fixed: - bsc#962220: Don't fail when /var/log/btmp is corrupted
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- pam&distro=SUSE Linux Enterprise Server 11 SP4< 1.1.5-0.17.2
- pam&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 1.1.5-0.17.2
- pam&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 1.1.5-0.17.2
1 vendor · 3 products
References
6 links- bugzilla.suse.com/854480REPORT
- bugzilla.suse.com/934920REPORT
- bugzilla.suse.com/962220REPORT