Description
A flaw was found in util-linux. Improper hostname canonicalization in the login(1) utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAM_RHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 13 | | =2.41-5 || =2.41.1-1 || =2.41.1-2 || =2.41.1-3 || =2.41.1-4 || =2.41.2-1 || =2.41.2-2 || =2.41.2-3 || =2.41.2-4 || =2.41.3-1 || =2.41.3-2 || =2.41.3-3 || =2.41.3-4 || =2.42-1 || =2.42-2 || =2.42-3 || =2.42-4 || =2.42-5 || =2.42~rc1-1 || =2.42~rc1-2 || =2.42~rc1-3 || =2.42~rc2-1 |
debian 14 | | =2.41-5 || =2.41.1-1 || =2.41.1-2 || =2.41.1-3 || =2.41.1-4 || =2.41.2-1 || =2.41.2-2 || =2.41.2-3 || =2.41.2-4 || =2.41.3-1 || =2.41.3-2 || =2.41.3-3 || =2.41.3-4 || =2.42-1 || =2.42-2 || =2.42-3 || =2.42-4 || =2.42-5 || =2.42~rc1-1 || =2.42~rc1-2 || =2.42~rc1-3 || =2.42~rc2-1 |
debian 11 | | =2.36.1-8 || =2.36.1-8+deb11u1 || =2.36.1-8+deb11u2 || =2.37.2-1 || =2.37.2-2 || =2.37.2-3 || =2.37.2-4 || =2.37.2-5 || =2.37.2-6 || =2.37.3-1 || =2.38-1 || =2.38-2 || =2.38-3 || =2.38-4 || =2.38-4+exp1 || =2.38-4+exp2 || =2.38-5 || =2.38-5+exp1 || =2.38-6 || =2.38.1-1 || =2.38.1-1.1 || =2.38.1-2 || =2.38.1-3 || =2.38.1-4 || =2.38.1-4+exp1 || =2.38.1-5 || =2.38.1-5+loong64 || =2.38.1-6 || =2.38~rc1-1 || =2.38~rc2-1 || =2.39.1-1 || =2.39.1-2 || =2.39.1-3 || =2.39.1-4 || =2.39.2-1 || =2.39.2-2 || =2.39.2-2.1 || =2.39.2-2.2 || =2.39.2-3 || =2.39.2-4 || =2.39.2-5 || =2.39.2-6 || =2.39.3-1 || =2.39.3-10 || =2.39.3-11 || =2.39.3-2 || =2.39.3-3 || =2.39.3-4 || =2.39.3-5 || =2.39.3-6 || =2.39.3-6.1 || =2.39.3-6.1~exp1 || =2.39.3-7 || =2.39.3-8 || =2.39.3-9 || =2.40-1 || =2.40-2 || =2.40-3 || =2.40-4 || =2.40-5 || =2.40-6 || =2.40-7 || =2.40-8 || =2.40.1-1 || =2.40.1-2 || =2.40.1-3 || =2.40.1-4 || =2.40.1-4+hurd.1 || =2.40.1-6 || =2.40.1-7 || =2.40.1-8 || =2.40.1-8.1 || =2.40.1-9 || =2.40.2-1 || =2.40.2-10 || =2.40.2-11 || =2.40.2-12 || =2.40.2-12+hurd.1 || =2.40.2-13 || =2.40.2-14 || =2.40.2-2 || =2.40.2-3 || =2.40.2-4 || =2.40.2-5 || =2.40.2-6 || =2.40.2-7 || =2.40.2-8 || =2.40.2-9 || =2.40.3-1 || =2.40.4-1 || =2.40.4-2 || =2.40.4-3 || =2.40.4-4 || =2.40.4-5 || =2.40~rc2-1 || =2.40~rc2-2 || =2.40~rc2-3 || =2.40~rc2-4 || =2.40~rc2-5 || =2.40~rc2-6 || =2.40~rc2-7 || =2.40~rc2-8 || =2.41-1 || =2.41-2 || =2.41-3 || =2.41-4 || =2.41-5 || =2.41.1-1 || =2.41.1-2 || =2.41.1-3 || =2.41.1-4 || =2.41.2-1 || =2.41.2-2 || =2.41.2-3 || =2.41.2-4 || =2.41.3-1 || =2.41.3-2 || =2.41.3-3 || =2.41.3-4 || =2.41~rc1-1 || =2.41~rc1-2 || =2.41~rc2-1 || =2.42-1 || =2.42-2 || =2.42-3 || =2.42-4 || =2.42-5 || =2.42~rc1-1 || =2.42~rc1-2 || =2.42~rc1-3 || =2.42~rc2-1 |
debian 12 | | =2.38.1-5 || =2.38.1-5+deb12u1 || =2.38.1-5+deb12u2 || =2.38.1-5+deb12u3 || =2.38.1-5+loong64 || =2.38.1-6 || =2.39.1-1 || =2.39.1-2 || =2.39.1-3 || =2.39.1-4 || =2.39.2-1 || =2.39.2-2 || =2.39.2-2.1 || =2.39.2-2.2 || =2.39.2-3 || =2.39.2-4 || =2.39.2-5 || =2.39.2-6 || =2.39.3-1 || =2.39.3-10 || =2.39.3-11 || =2.39.3-2 || =2.39.3-3 || =2.39.3-4 || =2.39.3-5 || =2.39.3-6 || =2.39.3-6.1 || =2.39.3-6.1~exp1 || =2.39.3-7 || =2.39.3-8 || =2.39.3-9 || =2.40-1 || =2.40-2 || =2.40-3 || =2.40-4 || =2.40-5 || =2.40-6 || =2.40-7 || =2.40-8 || =2.40.1-1 || =2.40.1-2 || =2.40.1-3 || =2.40.1-4 || =2.40.1-4+hurd.1 || =2.40.1-6 || =2.40.1-7 || =2.40.1-8 || =2.40.1-8.1 || =2.40.1-9 || =2.40.2-1 || =2.40.2-10 || =2.40.2-11 || =2.40.2-12 || =2.40.2-12+hurd.1 || =2.40.2-13 || =2.40.2-14 || =2.40.2-2 || =2.40.2-3 || =2.40.2-4 || =2.40.2-5 || =2.40.2-6 || =2.40.2-7 || =2.40.2-8 || =2.40.2-9 || =2.40.3-1 || =2.40.4-1 || =2.40.4-2 || =2.40.4-3 || =2.40.4-4 || =2.40.4-5 || =2.40~rc2-1 || =2.40~rc2-2 || =2.40~rc2-3 || =2.40~rc2-4 || =2.40~rc2-5 || =2.40~rc2-6 || =2.40~rc2-7 || =2.40~rc2-8 || =2.41-1 || =2.41-2 || =2.41-3 || =2.41-4 || =2.41-5 || =2.41.1-1 || =2.41.1-2 || =2.41.1-3 || =2.41.1-4 || =2.41.2-1 || =2.41.2-2 || =2.41.2-3 || =2.41.2-4 || =2.41.3-1 || =2.41.3-2 || =2.41.3-3 || =2.41.3-4 || =2.41~rc1-1 || =2.41~rc1-2 || =2.41~rc2-1 || =2.42-1 || =2.42-2 || =2.42-3 || =2.42-4 || =2.42-5 || =2.42~rc1-1 || =2.42~rc1-2 || =2.42~rc1-3 || =2.42~rc2-1 |
