← Back

CVE-2024-22365

nvd nist
Published: Feb 6, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

Affected (1)

Products: Linux Pam: Linux Pam
Linux Pam
1 product
Linux Pam
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Pam
Before 1.6.0

Related CWEs

CWE-664
Improper Control of a Resource Through its Lifetime
The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

References (11)

Source: cve@mitre.org
ExploitMailing ListPatchRelease Notes
Source: cve@mitre.org
Product
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListPatchRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.