CVE-2024-10963 json
Pam: improper hostname interpretation in pam_access leads to access control bypass
published 2024-11-07 2 y ago modified 2026-11-04 4 d ago also EUVD-2024-33602
- cvss
- 7.4
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 56%
- public exploits
- 0
- none known
Summary
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
Patch / fix
- Red Hat Red Hat Enterprise Linux 8 0:1.3.1-36.el8_10
- Red Hat Red Hat Enterprise Linux 9 0:1.5.1-22.el9_5
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:1.5.1-23.el9_4
- Red Hat Red Hat OpenShift Container Platform 4.16 416.94.202411261619-0
- Red Hat Red Hat OpenShift Container Platform 4.17 417.94.202411261220-0
- Red Hat Red Hat OpenShift Container Platform 4.18 v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9, v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9, v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9, v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9, v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9, v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9, v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9, v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9, v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9, v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9, v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9, v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9, v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9, v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9, v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9, v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9, v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9, v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9, v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9
- Red Hat Red Hat OpenShift AI 2.16 v2.16.0-1733133582
- pam Debian 14, Debian 13 1.7.0-5
debian advisories DEBIAN-CVE-2024-10963
- pam Ubuntu 24.04 LTS 1.5.3-5ubuntu5.5
ubuntu advisories UBUNTU-CVE-2024-10963
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- pam RHEL 8 1.3.1-36.el8_10
- pam RHEL 9 1.5.1-22.el9_5
- pam RHEL 9.4 EUS 1.5.1-23.el9_4
red hat advisories RHSA-2024:10379RHSA-2024:10244RHSA-2024:10232
- pam Linux Micro 6.1 1.6.1-slfo.1.1_2.1
- pam Linux Micro 6.0 1.6.0-4.1
suse advisories SUSE-SU-2025:20229-1SUSE-SU-2025:20104-1
- pam openSUSE Tumbleweed 1.7.0-2.1
opensuse advisories openSUSE-SU-2024:14563-1
- pam AlmaLinux 8 1.3.1-36.el8_10
- pam AlmaLinux 9 1.5.1-22.el9_5
almalinux advisories ALSA-2024:10379ALSA-2024:10244
- pam Rocky Linux 9 1.5.1-22.el9_5
- pam Rocky Linux 8 1.3.1-36.el8_10
rocky linux advisories RLSA-2024:10244RLSA-2024:10379
- github.com/linux-pam/linux-pam#835 pull request
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-10963 updated cvss 7.4
pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
-
Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8affected: workaround, no fix available
-
Red Hat Enterprise Linux AppStream (v. 9) pam-docs 1.5.1-22.el9_5, pam-devel 1.5.1-22.el9_5, pam-debuginfo 1.5.1-22.el9_5, pam-debugsource 1.5.1-22.el9_5fixed: vendor fix RHSA-2024:10244
-
Red Hat Enterprise Linux AppStream EUS (v.9.4) pam-docs 1.5.1-23.el9_4, pam-devel 1.5.1-23.el9_4, pam-debuginfo 1.5.1-23.el9_4, pam-debugsource 1.5.1-23.el9_4fixed: vendor fix RHSA-2024:10232
-
Red Hat Enterprise Linux BaseOS (v. 8) pam 1.3.1-36.el8_10fixed: vendor fix RHSA-2024:10379
-
Red Hat Enterprise Linux BaseOS (v. 9) pam 1.5.1-22.el9_5fixed: vendor fix RHSA-2024:10244
-
Red Hat Enterprise Linux BaseOS EUS (v.9.4) pam 1.5.1-23.el9_4fixed: vendor fix RHSA-2024:10232
-
Red Hat OpenShift AI 2.16 rhoai v2.16.0-1733133582fixed: vendor fix RHSA-2024:10852
-
Red Hat OpenShift Container Platform 4.16 rhcos 416.94.202411261619-0fixed: vendor fix RHSA-2024:10528
show 3 moreshow fewer
-
Red Hat OpenShift Container Platform 4.17 rhcos 417.94.202411261220-0fixed: vendor fix RHSA-2024:10518
-
Red Hat OpenShift Container Platform 4.18 rhcos 418.94.202502100215-0, openshift4/frr-rhel9 v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.18.0-202501230001.p0.g914783c.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9, +184 morefixed: vendor fix RHSA-2024:6122
-
Red Hat Enterprise Linux 6 pam Red Hat Enterprise Linux 7 pam Red Hat Enterprise Linux 10 pam Red Hat OpenShift AI 2.16 rhoai v2.16.0-1732898906, rhoai v2.16.0-1732899102, rhoai v2.16.0-1732953706, rhoai v2.16.0-1732953738, rhoai v2.16.0-1732953753, rhoai v2.16.0-1732953768, +14 more Red Hat OpenShift Container Platform 4.16 openshift4/ose-cli-rhel9 v4.16.0-202411251535.p0.gcf533b5.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.16.0-202411251535.p0.g67d3387.assembly.stream.el9, openshift4/ose-sdn-rhel9 v4.16.0-202411251535.p0.gc4dd04f.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.16.0-202411251535.p0.g16202ec.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.16.0-202411251535.p0.gc740dbd.assembly.stream.el9, openshift4/ose-tools-rhel9 v4.16.0-202411251535.p0.gcf533b5.assembly.stream.el9, +185 more Red Hat OpenShift Container Platform 4.17 openshift4/frr-rhel9 v4.17.0-202411251634.p0.g377d02f.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.17.0-202411251634.p0.g8b0472f.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.17.0-202411251634.p0.g5a24e85.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.17.0-202411251634.p0.gc82057d.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.17.0-202411251634.p0.g38cdcea.assembly.stream.el9, openshift4/ose-tools-rhel9 v4.17.0-202411251634.p0.g8b0472f.assembly.stream.el9, +183 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
0.78% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected products
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
- Red Hat Red Hat OpenShift Container Platform 4.16
- Red Hat Red Hat OpenShift Container Platform 4.17
- Red Hat Red Hat OpenShift Container Platform 4.18
- Red Hat Red Hat OpenShift AI 2.16
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat OpenShift Container Platform 4
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
- github.com /linux-pam/linux-pam/pull/835
-
access.redhat.com
/errata/RHSA-2024:10232
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:10244
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:10379
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:10518
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:10528
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:10852
vendor-advisory
-
access.redhat.com
/errata/RHSA-2024:6122
vendor-advisory
-
access.redhat.com
/security/cve/CVE-2024-10963
vdb-entry
-
bugzilla.redhat.com
/show_bug.cgi?id=2324291
issue-tracking
- github.com /linux-pam/linux-pam/issues/834
Sources
- CVE List CVE-2024-10963
- NVD CVE-2024-10963
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.