linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-devel | May 8, 2024 | Feb 6, 2024 |
| Alpine Linux | — | Upgrade linux-pam | Mar 21, 2024 | Feb 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade pamUpgrade pam-develUpgrade pam-debuginfo | Feb 8, 2024 | Feb 6, 2024 |
| Amazon_linux_2023 | — | Upgrade pamUpgrade pam-debugsourceUpgrade pam-docsUpgrade pam-debuginfoUpgrade pam-devel | Feb 17, 2025 | Jan 18, 2024 |
| Debian | — | Upgrade pam | May 15, 2025 | Feb 6, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pam | Mar 13, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade pam | May 31, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pam-develUpgrade pam | Jul 23, 2024 | Feb 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pam | Apr 9, 2024 | Feb 6, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade pamUpgrade pam-docsUpgrade pam-devel | May 7, 2024 | Jan 18, 2024 |
| Redhat_linux | — | Upgrade pamUpgrade pam-debuginfoUpgrade pam-develUpgrade pam-debugsourceUpgrade pam-docsNo solution exists | May 1, 2024 | Feb 6, 2024 |
| Rocky_linux | — | Upgrade pam-debuginfoUpgrade pamUpgrade pam-debugsourceUpgrade pam-devel | Jun 17, 2024 | Feb 6, 2024 |
| Suse | — | Upgrade pam-32bitUpgrade pam-develUpgrade pamUpgrade pam-extra-32bitUpgrade pam-devel-32bitUpgrade pam-docUpgrade pam-manpagesUpgrade pam-extra | Jan 19, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade libpam-modules (Ubuntu Pro)Upgrade libpam-modules | Jan 18, 2024 | Jan 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub