7.5
High
CVE-2018-17953 A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE…
Description
A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pam 1.3 | 1.3.0 → latest | No fix stated |