Lucene search
+L

4280 matches found

Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•33 views

EulerOS 2.0 SP11 : pam (EulerOS-SA-2024-1243)

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•25 views

EulerOS 2.0 SP10 : pam (EulerOS-SA-2024-1344)

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2024-1221)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2024-1243)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1References2
NVD
NVD
•added 2024/03/05 10:15 p.m.•44 views

CVE-2024-1901

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable...

4.3CVSS6.5AI score0.00339EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/05 10:15 p.m.•47 views

Authentication flaw

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable...

6.8AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/05 9:33 p.m.•24 views

CVE-2024-1901

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable...

6.9AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/05 9:33 p.m.•55 views

CVE-2024-1901

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable...

6.8AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/05 9:33 p.m.•95 views

CVE-2024-1901

A Denial of Service (DoS) vulnerability exists in Devolutions Server version 2023.3.14.0 (and prior versions) during the PAM password rotation process. This flaw occurs during the check-in process , where an authenticated user possessing specific PAM permissions can cause PAM credentials to becom...

4.3CVSS6.7AI score0.00339EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•7 views

PT-2024-18408

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2023.3.14.0 Description The issue allows an authenticated user with specific PAM permissions to make PAM credentials unavailable during the check-in process in PAM password rotation, resulting in a denial of service...

4.3CVSS0.00339EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•7 views

CVE-2024-1901: Undefined Security Weakness

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable...

4.3CVSS5.8AI score0.00339EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•24 views

openSUSE: Security Advisory for salt (SUSE-SU-2022:2178-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02062EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•30 views

openSUSE Security Advisory (SUSE-SU-2024:0136-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1References5
Cloud Foundry
Cloud Foundry
•added 2024/02/29 12:00 a.m.•40 views

USN-6588-1: PAM vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Matthias Gerstner discovered that the PAM pamnamespace module incorrectly handled special files when performing directory checks. A local attacker could possibly use this issue to cause PAM to stop...

5.5CVSS6.6AI score0.00459EPSS
SaveExploits1Affected Software3
Mageia
Mageia
•added 2024/02/09 1:34 a.m.•84 views

Updated pam packages fix a security vulnerability

The updated packages fix a security vulnerability: pamnamespace: protectdir: use ODIRECTORY to prevent local DoS situations. CVE-2024-22365...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/02/09 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2024-0030)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2024/02/06 8:15 a.m.•6 views

DEBIAN-CVE-2024-22365

linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2024/02/06 8:15 a.m.•10 views

ALPINE-CVE-2024-22365

linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2024/02/06 8:15 a.m.•25 views

AZL-34156 CVE-2024-22365 affecting package pam for versions less than 1.5.1-6

linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2024/02/06 8:15 a.m.•16 views

AZL-35100 CVE-2024-22365 affecting package pam for versions less than 1.5.3-2

linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References1
Rows per page
Query Builder