Wind River Support Network

HomeDefectsLIN1021-7094
Acknowledged

LIN1021-7094 : Security Advisory - libpam - CVE-2024-22365

Created: Jan 17, 2024    Updated: Jan 21, 2025
Resolved Date: Jan 15, 2025
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

https://nvd.nist.gov/vuln/detail/CVE-2024-22365

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube