CVE-2024-22365

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-664

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	RUGGEDCOM ROX MX5000	< V2.17.1
Siemens	RUGGEDCOM ROX MX5000RE	< V2.17.1
Siemens	RUGGEDCOM ROX RX1400	< V2.17.1
Siemens	RUGGEDCOM ROX RX1500	< V2.17.1
Siemens	RUGGEDCOM ROX RX1501	< V2.17.1
Siemens	RUGGEDCOM ROX RX1510	< V2.17.1
Siemens	RUGGEDCOM ROX RX1511	< V2.17.1
Siemens	RUGGEDCOM ROX RX1512	< V2.17.1
Siemens	RUGGEDCOM ROX RX1524	< V2.17.1
Siemens	RUGGEDCOM ROX RX1536	< V2.17.1
Siemens	RUGGEDCOM ROX RX5000	< V2.17.1
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

http://www.openwall.com/lists/oss-security/2024/01/18/3Exploit, Mailing List, Patch, Release Notes
https://github.com/linux-pam/linux-pamProduct
https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cbPatch
https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0Release Notes
http://www.openwall.com/lists/oss-security/2024/01/18/3Exploit, Mailing List, Patch, Release Notes
https://github.com/linux-pam/linux-pamProduct
https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cbPatch
https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0Release Notes
https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html
https://cert-portal.siemens.com/productcert/html/ssa-577017.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Feb 6, 2024
Last modified: Oct 15, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-223666.8Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses t CVE-2024-223685.5The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. CVE-2024-223697.8Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from CVE-2024-22375.4The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Global Badge module in all versions up to, CVE-2024-223705.4In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible CVE-2024-223717.5Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. CVE-2024-223726.8OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to exe CVE-2024-223739.8An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3 CVE-2024-223746.5Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of servi CVE-2024-223766.7Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an au CVE-2024-223775.3The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.CVE-2024-223786.7Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allow