linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pam-develUpgrade pamUpgrade pam-docs | May 8, 2024 | Feb 6, 2024 |
| Alpine Linux | — | Upgrade linux-pam | Mar 21, 2024 | Feb 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade pam-debuginfoUpgrade pam-develUpgrade pam | Feb 8, 2024 | Feb 6, 2024 |
| Amazon_linux_2023 | — | Upgrade pam-debugsourceUpgrade pamUpgrade pam-develUpgrade pam-debuginfoUpgrade pam-docs | Feb 17, 2025 | Jan 18, 2024 |
| Debian | — | Upgrade pam | May 15, 2025 | Feb 6, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | May 31, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pamUpgrade pam-devel | Jul 23, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pam | Apr 9, 2024 | Feb 6, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade pam-docsUpgrade pam-develUpgrade pam | May 7, 2024 | Jan 18, 2024 |
| Redhat_linux | — | Upgrade pamUpgrade pam-debugsourceUpgrade pam-develUpgrade pam-debuginfoUpgrade pam-docsNo solution exists | May 1, 2024 | Feb 6, 2024 |
| Rocky_linux | — | Upgrade pamUpgrade pam-debugsourceUpgrade pam-debuginfoUpgrade pam-devel | Jun 17, 2024 | Feb 6, 2024 |
| Suse | — | Upgrade pam-docUpgrade pam-manpagesUpgrade pam-extraUpgrade pam-devel-32bitUpgrade pamUpgrade pam-32bitUpgrade pam-develUpgrade pam-extra-32bit | Jan 19, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade libpam-modules (Ubuntu Pro)Upgrade libpam-modules | Jan 18, 2024 | Jan 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub