5.5
Moyenne
CVE-2024-22365 linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via…
Description
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| n/a | Versions non publiées | |
| RUGGEDCOM ROX MX5000 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX MX5000RE 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1400 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1500 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1501 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1510 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1511 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1512 2.17 | premières → < 2.17.1 | 2.17.1 |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM ROX RX1524 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX1536 2.17 | premières → < 2.17.1 | 2.17.1 |
| RUGGEDCOM ROX RX5000 2.17 | premières → < 2.17.1 | 2.17.1 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
Références
- github.com github.com
- www.openwall.com www.openwall.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de n/a
Les 144658 CVE de n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Non notée
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Non notée
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Non notée
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Non notée