{
  "cveId": "CVE-2022-28321",
  "url": "https://patchblox.com/security/cve/CVE-2022-28321",
  "summary": "CVE-2022-28321 is fixed in 5 products on 1 platform, first by libpam-cracklib 1.1.8-3.6ubuntu2.18.04.4, released September 19, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libpam0g: The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins",
  "description": "The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn\u0027t correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.",
  "published": "2022-09-19T15:15:00Z",
  "severity": "Negligible",
  "epss": 0.01579,
  "epssPercentile": 0.75672,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libpam-cracklib",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.8-3.6ubuntu2.18.04.4",
      "fix": "libpam-cracklib 1.1.8-3.6ubuntu2.18.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam-cracklib-1.1.8-3.6ubuntu2.18.04.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-cracklib",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.3.1-5ubuntu4.4",
      "fix": "libpam-cracklib 1.3.1-5ubuntu4.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpam-cracklib-1.3.1-5ubuntu4.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-cracklib",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-11ubuntu2.1",
      "fix": "libpam-cracklib 1.4.0-11ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libpam-cracklib-1.4.0-11ubuntu2.1",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.8-3.6ubuntu2.18.04.4",
      "fix": "libpam-modules 1.1.8-3.6ubuntu2.18.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam-modules-1.1.8-3.6ubuntu2.18.04.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.3.1-5ubuntu4.4",
      "fix": "libpam-modules 1.3.1-5ubuntu4.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpam-modules-1.3.1-5ubuntu4.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-11ubuntu2.1",
      "fix": "libpam-modules 1.4.0-11ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libpam-modules-1.4.0-11ubuntu2.1",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.8-3.6ubuntu2.18.04.4",
      "fix": "libpam-modules-bin 1.1.8-3.6ubuntu2.18.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam-modules-bin-1.1.8-3.6ubuntu2.18.04.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules-bin",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.3.1-5ubuntu4.4",
      "fix": "libpam-modules-bin 1.3.1-5ubuntu4.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpam-modules-bin-1.3.1-5ubuntu4.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-modules-bin",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-11ubuntu2.1",
      "fix": "libpam-modules-bin 1.4.0-11ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libpam-modules-bin-1.4.0-11ubuntu2.1",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-runtime",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.8-3.6ubuntu2.18.04.4",
      "fix": "libpam-runtime 1.1.8-3.6ubuntu2.18.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam-runtime-1.1.8-3.6ubuntu2.18.04.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-runtime",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.3.1-5ubuntu4.4",
      "fix": "libpam-runtime 1.3.1-5ubuntu4.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpam-runtime-1.3.1-5ubuntu4.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-runtime",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-11ubuntu2.1",
      "fix": "libpam-runtime 1.4.0-11ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libpam-runtime-1.4.0-11ubuntu2.1",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam0g",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.8-3.6ubuntu2.18.04.4",
      "fix": "libpam0g 1.1.8-3.6ubuntu2.18.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam0g-1.1.8-3.6ubuntu2.18.04.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam0g",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.3.1-5ubuntu4.4",
      "fix": "libpam0g 1.3.1-5ubuntu4.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpam0g-1.3.1-5ubuntu4.4",
      "released": "2022-09-19T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam0g",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.4.0-11ubuntu2.1",
      "fix": "libpam0g 1.4.0-11ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libpam0g-1.4.0-11ubuntu2.1",
      "released": "2022-09-19T15:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}