oath-toolkit-help
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[OATH-Toolkit-help] Bug#742140: libpam-oath: PAM module does not check w


From: Eero Häkkinen
Subject: [OATH-Toolkit-help] Bug#742140: libpam-oath: PAM module does not check whether strdup allocations succeeded
Date: Wed, 19 Mar 2014 19:49:52 +0200
User-agent: Mutt/1.5.21 (2010-09-15)

Package: libpam-oath
Version: 2.0.2-2
Severity: grave
Tags: security upstream patch

The OATH Toolkit PAM module does not check whether strdup allocations 
succeeded. This may result in null pointer dereference and application 
crash.

Depending on the use of the PAM module, this may be remotely exploitable.

Attachment: strdup-retval-check.patch
Description: Text Data


reply via email to

[Prev in Thread] Current Thread [Next in Thread]