USN-8688-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-8688-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8688-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-8688-1

Published

2026-08-27T19:43:08Z

Modified

2026-08-31T17:16:06.871331742Z

Summary

pam vulnerability

Details

Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records when certain services invoked the account phase without first performing authentication. An attacker could possibly use this issue to reset failed login counters, resulting in authentication lockout restrictions being bypassed.

References

Affected packages

Ubuntu:Pro:18.04:LTS / pam

Package

Name: pam
Purl: pkg:deb/ubuntu/pam?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.8-3.6ubuntu2.18.04.6+esm2

Affected versions

1.*

1.1.8-3.2ubuntu3

1.1.8-3.2ubuntu4

1.1.8-3.6ubuntu1

1.1.8-3.6ubuntu2

1.1.8-3.6ubuntu2.18.04.1

1.1.8-3.6ubuntu2.18.04.2

1.1.8-3.6ubuntu2.18.04.3

1.1.8-3.6ubuntu2.18.04.4

1.1.8-3.6ubuntu2.18.04.6

1.1.8-3.6ubuntu2.18.04.6+esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "1.1.8-3.6ubuntu2.18.04.6+esm2",
            "binary_name": "libpam-cracklib"
        },
        {
            "binary_version": "1.1.8-3.6ubuntu2.18.04.6+esm2",
            "binary_name": "libpam-modules"
        },
        {
            "binary_version": "1.1.8-3.6ubuntu2.18.04.6+esm2",
            "binary_name": "libpam-modules-bin"
        },
        {
            "binary_version": "1.1.8-3.6ubuntu2.18.04.6+esm2",
            "binary_name": "libpam-runtime"
        },
        {
            "binary_version": "1.1.8-3.6ubuntu2.18.04.6+esm2",
            "binary_name": "libpam0g"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8688-1.json"

cves_map

{
    "ecosystem": "Ubuntu:Pro:18.04:LTS",
    "cves": []
}

Ubuntu:Pro:20.04:LTS / pam

Package

Name: pam
Purl: pkg:deb/ubuntu/pam?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.1-5ubuntu4.7+esm1

Affected versions

1.*

1.3.1-5ubuntu1

1.3.1-5ubuntu3

1.3.1-5ubuntu4

1.3.1-5ubuntu4.1

1.3.1-5ubuntu4.2

1.3.1-5ubuntu4.3

1.3.1-5ubuntu4.4

1.3.1-5ubuntu4.6

1.3.1-5ubuntu4.7

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "1.3.1-5ubuntu4.7+esm1",
            "binary_name": "libpam-cracklib"
        },
        {
            "binary_version": "1.3.1-5ubuntu4.7+esm1",
            "binary_name": "libpam-modules"
        },
        {
            "binary_version": "1.3.1-5ubuntu4.7+esm1",
            "binary_name": "libpam-modules-bin"
        },
        {
            "binary_version": "1.3.1-5ubuntu4.7+esm1",
            "binary_name": "libpam-runtime"
        },
        {
            "binary_version": "1.3.1-5ubuntu4.7+esm1",
            "binary_name": "libpam0g"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8688-1.json"

cves_map

{
    "ecosystem": "Ubuntu:Pro:20.04:LTS",
    "cves": []
}

Ubuntu:22.04:LTS / pam

Package

Name: pam
Purl: pkg:deb/ubuntu/pam?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.0-11ubuntu2.8

Affected versions

1.*

1.3.1-5ubuntu11

1.4.0-10ubuntu1

1.4.0-10ubuntu2

1.4.0-11ubuntu1

1.4.0-11ubuntu2

1.4.0-11ubuntu2.1

1.4.0-11ubuntu2.3

1.4.0-11ubuntu2.4

1.4.0-11ubuntu2.5

1.4.0-11ubuntu2.6

1.4.0-11ubuntu2.7

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "1.4.0-11ubuntu2.8",
            "binary_name": "libpam-cracklib"
        },
        {
            "binary_version": "1.4.0-11ubuntu2.8",
            "binary_name": "libpam-modules"
        },
        {
            "binary_version": "1.4.0-11ubuntu2.8",
            "binary_name": "libpam-modules-bin"
        },
        {
            "binary_version": "1.4.0-11ubuntu2.8",
            "binary_name": "libpam-runtime"
        },
        {
            "binary_version": "1.4.0-11ubuntu2.8",
            "binary_name": "libpam0g"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8688-1.json"

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": []
}

Ubuntu:24.04:LTS / pam

Package

Name: pam
Purl: pkg:deb/ubuntu/pam?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-5ubuntu5.7

Affected versions

1.*

1.5.2-6ubuntu1

1.5.2-9.1ubuntu1

1.5.2-9.1ubuntu2

1.5.2-9.1ubuntu3

1.5.3-5ubuntu3

1.5.3-5ubuntu4

1.5.3-5ubuntu5

1.5.3-5ubuntu5.1

1.5.3-5ubuntu5.4

1.5.3-5ubuntu5.5

1.5.3-5ubuntu5.6

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "1.5.3-5ubuntu5.7",
            "binary_name": "libpam-modules"
        },
        {
            "binary_version": "1.5.3-5ubuntu5.7",
            "binary_name": "libpam-modules-bin"
        },
        {
            "binary_version": "1.5.3-5ubuntu5.7",
            "binary_name": "libpam-runtime"
        },
        {
            "binary_version": "1.5.3-5ubuntu5.7",
            "binary_name": "libpam0g"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8688-1.json"

cves_map

{
    "ecosystem": "Ubuntu:24.04:LTS",
    "cves": []
}