CVE-2018-17953
pam_access does not handle netmask matches correctly
A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
CVSS 3.0 · 7.5 High
EPSS 1.3%
KEV · Not listed
Vendors
Products