CVE-2024-6126

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-6126

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6126.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6126

Related

Published

2024-07-03T15:15:06Z

Modified

2024-09-18T03:26:40.727793Z

Summary

[none]

Details

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pamenv's userreadenv option, which leads to a denial of service (DoS) attack.

References

Affected packages

Debian:11 / cockpit

Package

Name: cockpit
Purl: pkg:deb/debian/cockpit?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

239-1

243-1

243-2

244-1

248-1

249-1

250-1

251-1~bpo10+1

251-1

251-2

252-1

254-1~bpo10+1

254-1

255-1

256-1~bpo11+1

256-1

257-1~bpo11+1

257-1

258-1

259-1~bpo11+1

259-1

259-2

260-1~bpo11+1

260-1

261-1~bpo11+1

261-1

262-1

263-1

264-1

265-1~bpo11+1

265-1

266-1~bpo11+1

266-1

267-1

269-1

271-1~bpo11+1

271-1

272-1~bpo11+1

272-1

273-1~bpo11+1

273-1

274-1

276-1

277-1

278-1

279-1~bpo11+1

279-1

280-1

282-1~bpo11+1

282-1

283-1~bpo11+1

283-1

284-1~bpo11+1

284-1

285-1~bpo11+1

285-1

286-1~bpo11+1

286-1

287-1~bpo11+1

287-1

289-1

290-1

291-1

292-1

293-1

294-1

295-1

296-1

297-1~bpo12+1

297-1

298-1

299-1~bpo12+1

299-1

300-1

301-1~bpo12+1

301-1

302-1

303-1~bpo12+1

303-1

304-1

305-1~bpo12+1

305-1

306-1~bpo12+1

306-1

307-1~bpo12+1

307-1

308-1~bpo12+1

308-1

309-1~bpo12+1

309-1

310-1

311-1~bpo12+1

311-1

312-1

313-1

314-1

316-1

317-1

317-2

317-3

317-4

317-5

318-1

318-2

318-3

318-4~bpo12+1

318-4

319-1~bpo12+1

319-1

320-1~bpo12+1

320-1

321-1

322-1~bpo12+1

322-1

323-1~bpo12+1

323-1

324-1

276.*

276.1-1~bpo11+1

276.1-1

288.*

288.1-1

294.*

294.1-1

300.*

300.1-1~bpo12+1

300.1-1

310.*

310.1-1~bpo12+1

310.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / cockpit

Package

Name: cockpit
Purl: pkg:deb/debian/cockpit?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

287.1-0+deb12u3

Affected versions

Other

287-1

287.*

287.1-0+deb12u1

287.1-0+deb12u2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / cockpit

Package

Name: cockpit
Purl: pkg:deb/debian/cockpit?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

320-1

Affected versions

Other

287-1

289-1

290-1

291-1

292-1

293-1

294-1

295-1

296-1

297-1~bpo12+1

297-1

298-1

299-1~bpo12+1

299-1

300-1

301-1~bpo12+1

301-1

302-1

303-1~bpo12+1

303-1

304-1

305-1~bpo12+1

305-1

306-1~bpo12+1

306-1

307-1~bpo12+1

307-1

308-1~bpo12+1

308-1

309-1~bpo12+1

309-1

310-1

311-1~bpo12+1

311-1

312-1

313-1

314-1

316-1

317-1

317-2

317-3

317-4

317-5

318-1

318-2

318-3

318-4~bpo12+1

318-4

319-1~bpo12+1

319-1

320-1~bpo12+1

288.*

288.1-1

294.*

294.1-1

300.*

300.1-1~bpo12+1

300.1-1

310.*

310.1-1~bpo12+1

310.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}