CVE-2013-0191: Lucas Clemente Vella Libpam-Pgsql

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password.

Affected products

• Lucas Clemente Vella Libpam-Pgsql: version 0.7 only

Published 2014-06-03. Last modified 2026-06-16.