Wind River Support Network

HomeDefectsLIN1024-88

Fixed

LIN1024-88 : Security Advisory - libpam - CVE-2024-22365

Created: Apr 29, 2024 Updated: Sep 30, 2024

Resolved Date: Sep 29, 2024

Found In Version: 10.24.33.1

Fix Version: 10.24.33.3

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

https://nvd.nist.gov/vuln/detail/CVE-2024-22365

CVEs

CVE-2024-22365