PT-2022-4982 · Linux Pam+2 · Linux-Pam+2

Thomas Leroy · Published 2022-03-29 · Updated 2025-05-29 · CVE-2022-28321

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux-PAM versions prior to 1.5.2-6.1

Description The issue is related to the pam access.so module of the Linux-PAM package, which does not correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. This can allow a user with denied access to a machine to still get access. The relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory, and it does not affect Linux-PAM upstream.

Recommendations For Linux-PAM versions prior to 1.5.2-6.1, update to version 1.5.2-6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the pam access.so module until a patch is available. Avoid using the pam access.so module for SSH logins from IP addresses that are not resolvable via DNS until the issue is resolved.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-06184

CVE-2022-28321

USN-5825-1

USN-5825-2

Affected Products

Linuxmint

Linux-Pam

Ubuntu

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2022-28321 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-28321 · Security Note
• https://ubuntu.com/security/CVE-2022-28321 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5825-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28321 · Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1197654 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-28321 · Vendor Advisory
• http://download.opensuse.org/source/distribution/openSUSE-current/repo/oss/src · Vendor Advisory
• https://osv.dev/vulnerability/USN-5825-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06184 · Security Note
• https://suse.com/security/cve/CVE-2022-28321.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5825-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5825-2 · Vendor Advisory
• https://github.com/linux-pam/linux-pam/pull/447 · Note
• https://vuldb.com/?id.209083 · Note