CVE-2024-22365

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-22365
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22365.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-22365
Related
Published
2024-02-06T08:15:52Z
Modified
2024-12-05T15:36:07.617832Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protectdir) lacks ODIRECTORY.

References

Affected packages

Alpine:v3.20 / linux-pam

Package

Name
linux-pam
Purl
pkg:apk/alpine/linux-pam?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.0-r0

Affected versions

1.*

1.1.3-r0
1.1.3-r1
1.1.3-r2
1.1.3-r3
1.1.3-r4
1.1.5-r0
1.1.6-r0
1.1.8-r0
1.1.8-r1
1.1.8-r2
1.2.0-r0
1.2.1-r0
1.2.1-r1
1.3.0-r0
1.3.0-r1
1.3.1-r0
1.3.1-r1
1.3.1-r2
1.3.1-r3
1.3.1-r4
1.4.0-r0
1.4.0-r1
1.5.1-r0
1.5.1-r1
1.5.2-r0
1.5.2-r1
1.5.2-r2
1.5.2-r3
1.5.2-r4
1.5.2-r5
1.5.2-r6
1.5.2-r7
1.5.2-r8
1.5.2-r9
1.5.2-r10
1.5.3-r0
1.5.3-r1
1.5.3-r2
1.5.3-r3
1.5.3-r4
1.5.3-r5
1.5.3-r6
1.5.3-r7
1.5.3-r8

Alpine:v3.21 / linux-pam

Package

Name
linux-pam
Purl
pkg:apk/alpine/linux-pam?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.0-r0

Affected versions

1.*

1.1.3-r0
1.1.3-r1
1.1.3-r2
1.1.3-r3
1.1.3-r4
1.1.5-r0
1.1.6-r0
1.1.8-r0
1.1.8-r1
1.1.8-r2
1.2.0-r0
1.2.1-r0
1.2.1-r1
1.3.0-r0
1.3.0-r1
1.3.1-r0
1.3.1-r1
1.3.1-r2
1.3.1-r3
1.3.1-r4
1.4.0-r0
1.4.0-r1
1.5.1-r0
1.5.1-r1
1.5.2-r0
1.5.2-r1
1.5.2-r2
1.5.2-r3
1.5.2-r4
1.5.2-r5
1.5.2-r6
1.5.2-r7
1.5.2-r8
1.5.2-r9
1.5.2-r10
1.5.3-r0
1.5.3-r1
1.5.3-r2
1.5.3-r3
1.5.3-r4
1.5.3-r5
1.5.3-r6
1.5.3-r7
1.5.3-r8

Debian:11 / pam

Package

Name
pam
Purl
pkg:deb/debian/pam?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.0-9
1.4.0-9+deb11u1
1.4.0-10
1.4.0-11
1.4.0-12
1.4.0-13
1.5.2-1
1.5.2-2
1.5.2-3
1.5.2-4
1.5.2-5
1.5.2-6
1.5.2-7
1.5.2-8
1.5.2-9
1.5.2-9.1
1.5.3-1
1.5.3-2
1.5.3-3
1.5.3-4
1.5.3-5
1.5.3-6
1.5.3-6+hurd.1
1.5.3-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / pam

Package

Name
pam
Purl
pkg:deb/debian/pam?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.5.2-6
1.5.2-6+deb12u1
1.5.2-7
1.5.2-8
1.5.2-9
1.5.2-9.1
1.5.3-1
1.5.3-2
1.5.3-3
1.5.3-4
1.5.3-5
1.5.3-6
1.5.3-6+hurd.1
1.5.3-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / pam

Package

Name
pam
Purl
pkg:deb/debian/pam?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.5.3-4

Affected versions

1.*

1.5.2-6
1.5.2-7
1.5.2-8
1.5.2-9
1.5.2-9.1
1.5.3-1
1.5.3-2
1.5.3-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/linux-pam/linux-pam

Affected ranges

Type
GIT
Repo
https://github.com/linux-pam/linux-pam
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
031bb5a5d0d950253b68138b498dc93be69a64cb

Affected versions

Other

Linux-PAM-0-73
Linux-PAM-0-74
Linux-PAM-0-75
Linux-PAM-0-76
Linux-PAM-0-77
Linux-PAM-0-78
Linux-PAM-0-78-Beta1
Linux-PAM-0-79
Linux-PAM-0-80
Linux-PAM-0_99_10_0
Linux-PAM-0_99_1_0
Linux-PAM-0_99_2_0
Linux-PAM-0_99_2_1
Linux-PAM-0_99_3_0
Linux-PAM-0_99_4_0
Linux-PAM-0_99_5_0
Linux-PAM-0_99_6_0
Linux-PAM-0_99_6_1
Linux-PAM-0_99_6_2
Linux-PAM-0_99_6_3
Linux-PAM-0_99_7_0
Linux-PAM-0_99_7_1
Linux-PAM-0_99_8_0
Linux-PAM-0_99_8_1
Linux-PAM-0_99_9_0
Linux-PAM-1_0_0
Linux-PAM-1_0_90
Linux-PAM-1_0_91
Linux-PAM-1_0_92
Linux-PAM-1_1-branch
Linux-PAM-1_1_0
Linux-PAM-1_1_1
Linux-PAM-1_1_2
Linux-PAM-1_1_3
Linux-PAM-1_1_4
Linux-PAM-1_1_5
Linux-PAM-1_1_7
Linux-PAM-1_1_8
Linux-PAM-1_2_0
Linux-PAM-1_2_1
before_automake
help
pam_unix_refactor

Linux-PAM-1.*

Linux-PAM-1.3.0

v1.*

v1.1.4
v1.1.6
v1.3.1
v1.4.0
v1.5.0
v1.5.1
v1.5.2
v1.5.3