linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

🗓️ 06 Feb 2024 08:00:00Reported by MicrosoftType

linux-pam before 1.6.0 can cause denial of service via mkfifo because openat lacks directory flag.

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Insecure Inherited Permissions in the RHEL UBI (CVE-2024-22365)	27 Jun 202519:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.	17 Jun 202411:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Aug 202514:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced.	16 Jul 202412:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	23 Aug 202409:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to DoS (CVE-2024-22365)	28 Jan 202522:08	–	ibm
Tenable Nessus	Amazon Linux 2023 : pam, pam-devel (ALAS2023-2024-502)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : pam (ALAS-2024-2435)	6 Feb 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0137: pam (ALINUX3-SA-2024:0137)	14 May 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: pam (CVE-2024-22365)	10 Feb 202500:00	–	nessus