Lucene search
Gentoo FoundationMGASA-2024-0030HistoryFeb 09, 2024 - 4:34 a.m.
Updated pam packages fix a security vulnerability
2024-02-0904:34:03
Gentoo Foundation
advisories.mageia.org
20
pam packages
security vulnerability
pam_namespace
local dos
cve-2024-22365
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The updated packages fix a security vulnerability: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. (CVE-2024-22365)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | pam | < 1.5.2-5.1 | pam-1.5.2-5.1.mga9 |
Related
cve
cve
CVE-2024-22365
2024-02-06 08:15:52
nessus
nessus
Slackware Linux 15.0 / current pam Vulnerability (SSA:2024-026-01)
2024-01-31 00:00:00
EulerOS Virtualization 2.10.1 : pam (EulerOS-SA-2024-1553)
2024-04-19 00:00:00
redhatcve
redhatcve
CVE-2024-22365
2024-01-19 12:04:26
slackware
slackware
[slackware-security] pam
2024-01-26 21:03:08
cbl_mariner
cbl_mariner
CVE-2024-22365 affecting package pam for versions less than 1.5.1-6
2024-04-09 20:48:36
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0030)
2024-02-09 00:00:00
openSUSE: Security Advisory for pam (SUSE-SU-2024:0136-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6588-2)
2024-03-27 00:00:00
osv
osv
Moderate: pam security update
2024-04-30 00:00:00
CVE-2024-22365
2024-02-06 08:15:52
Moderate: pam security update
2024-06-14 13:59:16
alpinelinux
alpinelinux
CVE-2024-22365
2024-02-06 08:15:52
cvelist
cvelist
CVE-2024-22365
2024-02-06 00:00:00
redhat
redhat
(RHSA-2024:3163) Moderate: pam security update
2024-05-22 06:35:47
(RHSA-2024:2438) Moderate: pam security update
2024-04-30 06:15:42
nvd
nvd
CVE-2024-22365
2024-02-06 08:15:52
ubuntu
ubuntu
PAM vulnerability
2024-03-26 00:00:00
PAM vulnerability
2024-01-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-10 17:16:30
amazon
amazon
Low: pam
2024-02-01 19:57:00
oraclelinux
oraclelinux
pam security update
2024-05-03 00:00:00
pam security update
2024-05-23 00:00:00
cloudfoundry
cloudfoundry
USN-6588-1: PAM vulnerability | Cloud Foundry
2024-02-29 00:00:00
almalinux
almalinux
Moderate: pam security update
2024-05-22 00:00:00
Moderate: pam security update
2024-04-30 00:00:00
redos
redos
ROS-20240409-14
2024-04-09 00:00:00
debiancve
debiancve
CVE-2024-22365
2024-02-06 08:15:52
ubuntucve
ubuntucve
CVE-2024-22365
2024-01-17 00:00:00
prion
prion
Code injection
2024-02-06 08:15:00
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0554
2024-01-20 00:00:00
Moderate Photon OS Security Update - PHSA-2024-3.0-0714
2024-01-18 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0193
2024-01-19 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for MGASA-2024-0030