CVE-2024-10963: Red Hat Enterprise Linux 10

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.

Affected products

• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8: before 0:1.3.1-36.el8_10 (fixed in 0:1.3.1-36.el8_10)
• Red Hat Red Hat Enterprise Linux 9: before 0:1.5.1-22.el9_5 (fixed in 0:1.5.1-22.el9_5)
• Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:1.5.1-23.el9_4 (fixed in 0:1.5.1-23.el9_4)
• Red Hat Red Hat Openshift Ai 2.16: before v2.16.0-1733133582 (fixed in v2.16.0-1733133582)
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Openshift Container Platform 4.16: before 416.94.202411261619-0 (fixed in 416.94.202411261619-0)
• Red Hat Red Hat Openshift Container Platform 4.17: before 417.94.202411261220-0 (fixed in 417.94.202411261220-0)
• Red Hat Red Hat Openshift Container Platform 4.18: before v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 (fixed in v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9); before v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 (fixed in v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9); before v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 (fixed in v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9); before v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 (fixed in v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9); before v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 (fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9); before v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 (fixed in v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9); …

Published 2024-11-07. Last modified 2026-08-31.