CVE-2011-3149

CVE-2011-3149 describes a denial-of-service vulnerability in the pam_env module of Linux-PAM versions prior to 1.1.5. Specifically, the _expand_arg function fails to properly handle environment variable expansion overflows, leading to excessive CPU consumption. This is a low-severity local vulnerability (CVSS 2.1) with a potential impact of denial of service, requiring local access and low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.