Red Hat Security Advisory

RHSA-2024:2438

pam security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) pam-devel-1.5.1-19.el9, pam-docs-1.5.1-19.el9
Red Hat Enterprise Linux BaseOS (v. 9) pam-1.5.1-19.el9

Fixes 1 record

TI-2024-14943 CVE-2024-22365 · GHSA-pcmw-6hxc-hqmx

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service…

LOW 25

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00459 Published 2024-02-06 Partial fix CWE-664