CVE-2013-4285: Dkorunic Pam S/key

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.

Affected products

• Dkorunic Pam S/key: affected versions not specified

Published 2014-04-28. Last modified 2026-06-16.