Summary
Matthias Gerstner discovered that the PAM pam_namespace module incorrectly
handled special files when performing directory checks. A local attacker
could possibly use this issue to cause PAM to stop responding, resulting in
a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | pam | 1.3.1-5ubuntu4.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | pam | 1.4.0-11ubuntu2.4 |
Vulnerabilities 1
-
Medium 5.5
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…
References
-
report
https://ubuntu.com/security/CVE-2024-22365