« List of all CVEs

CVE-2024-22365

Published: 2/6/2024 Last updated: 11/3/2025 Reserved: 1/9/2024

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 5.5 Medium CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Opam packages affected (2)

conf-pam pam

Products affected (2)

Product Vendor Version
n/a n/a n/a
n/a n/a 18.3.6.1

References (18)