Wind River Support Network

HomeDefectsLIN1023-3408

Fixed

LIN1023-3408 : Security Advisory - libpam - CVE-2024-22365

Created: Jan 17, 2024 Updated: Dec 17, 2024

Resolved Date: Dec 13, 2024

Found In Version: 10.23.30.1

Fix Version: 10.23.30.14

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

https://nvd.nist.gov/vuln/detail/CVE-2024-22365

CVEs

CVE-2024-22365