critical9.8
CVE-2020-27678
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022.
Impact
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Illumos | Illumos | before 2020-10-22 |
| Joyent | Smartos | before 20201022 |
| Omniosce | Omnios | before r151030by from r151032 through r151032ay from r151034 before r151034y |