CVE-2024-22365

Опубликовано: 06 фев. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

Ссылки

http://www.openwall.com/lists/oss-security/2024/01/18/3
Exploit
Mailing List
Patch
Release Notes
https://github.com/linux-pam/linux-pam
Product
https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb
Patch
https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0
Release Notes
http://www.openwall.com/lists/oss-security/2024/01/18/3
Exploit
Mailing List
Patch
Release Notes
https://github.com/linux-pam/linux-pam
Product
https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb
Patch
https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*

Версия до 1.6.0 (исключая)

EPSS

Процентиль: 24%

0.00079

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-664

Связанные уязвимости

CVE-2024-22365

CVSS3: 5.5

ubuntu

больше 1 года назад

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

CVE-2024-22365

CVSS3: 5.5

redhat

больше 1 года назад

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

CVE-2024-22365

CVSS3: 5.5

msrc

9 месяцев назад

Описание отсутствует

CVE-2024-22365

CVSS3: 5.5

debian

больше 1 года назад

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a den ...

SUSE-SU-2024:0137-1

suse-cvrf

больше 1 года назад

Security update for pam

EPSS

Процентиль: 24%

0.00079

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-664