Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences.
1.3.1-5ubuntu11.3.1-5ubuntu31.3.1-5ubuntu41.3.1-5ubuntu4.11.3.1-5ubuntu4.21.3.1-5ubuntu4.31.3.1-5ubuntu4.41.3.1-5ubuntu4.61.3.1-5ubuntu4.71.4.0-11ubuntu2.71.5.3-5ubuntu5.61.5.3-7ubuntu41.5.3-7ubuntu51.5.3-7ubuntu61.7.0-5ubuntu11.7.0-5ubuntu21.7.0-5ubuntu3.11.1.8-3.1ubuntu31.1.8-3.2ubuntu21.1.8-3.2ubuntu2.11.1.8-3.2ubuntu2.31.1.8-3.2ubuntu2.3+esm11.1.8-3.2ubuntu2.3+esm21.1.8-3.2ubuntu2.3+esm41.1.8-3.2ubuntu2.3+esm5Exploitability
AV:NAC:HAT:PPR:NUI:NVulnerable System
VC:HVI:NVA:NSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/AU:N/V:D