{"id":"CVE-2024-22365","aliases":["ALPINE-CVE-2024-22365","ALSA-2024:2438","ALSA-2024:3163","AZL-34156","AZL-35100","BELL-CVE-2024-22365","CLSA-2024-1712671933","CLSA-2024-1713333823","CLSA-2024-1718202007","CLSA-2024-1718796961","CLSA-2024-1719569368","CLSA-2025-1749570465","CLSA-2025-1749571114","CLSA-2026-1790600614","CLSA-2026-1790600758","CLSA-2026-1790601003","DEBIAN-CVE-2024-22365","DLA-4306-1","EUVD-2024-19924","GHSA-pcmw-6hxc-hqmx","MGASA-2024-0030","OESA-2024-1096","OESA-2024-1129","OESA-2024-1130","RHSA-2024:2438","RHSA-2024:3163","RLSA-2024:3163","ROOT-OS-ALPINE-318-CVE-2024-22365","ROOT-OS-ALPINE-319-CVE-2024-22365","ROOT-OS-DEBIAN-11-CVE-2024-22365","ROOT-OS-DEBIAN-12-CVE-2024-22365","SUSE-SU-2024:0136-1","SUSE-SU-2024:0136-2","SUSE-SU-2024:0137-1","UBUNTU-CVE-2024-22365","USN-6588-1","USN-6588-2","openSUSE-SU-2024:13616-1"],"status":"published","title":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked...","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00459,"percentile":0.4007,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-664"],"published":"2024-01-17T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam","fixed_in":["1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-devel","fixed_in":["1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-docs","fixed_in":["1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pam","fixed_in":["1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pam-devel","fixed_in":["1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"pam","fixed_in":["1.5.1-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"pam","fixed_in":["1.5.3-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-pam","fixed_in":["1.6.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cracklib","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-doc","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules-bin","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-runtime","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g-dev","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cracklib","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-doc","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules-bin","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-runtime","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g-dev","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","fixed_in":["1.5.1-14.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","fixed_in":["1.5.1-14.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","fixed_in":["1.5.1-14.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam","fixed_in":["1.3.1-15.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam-devel","fixed_in":["1.3.1-15.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam","fixed_in":["1.3.1-14.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam-devel","fixed_in":["1.3.1-14.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pam","fixed_in":["1.5.2-6+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pam","fixed_in":["1.5.3-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pam","fixed_in":["1.5.3-4"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"pam","fixed_in":["1.5.2-5.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"pam","fixed_in":["1.4.0-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"pam","fixed_in":["1.5.2-7.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"pam","fixed_in":["1.5.2-7.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"pam","fixed_in":["1.5.2-7.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","fixed_in":["1.4.0-11.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","fixed_in":["1.5.2-7.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-19.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","fixed_in":["0:1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","fixed_in":["0:1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pam","fixed_in":["0:1.3.1-33.el8"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"linux-pam","fixed_in":["1.5.2-r100071","1.5.2-r100072","1.5.2-r100074","1.5.2-r100073","1.5.2-r100075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-linux-pam","fixed_in":["1.5.2-r100071","1.5.2-r100072","1.5.2-r100074","1.5.2-r100073","1.5.2-r100075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-linux-pam","fixed_in":["1.5.3-r70071"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP4","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"pam","fixed_in":["1.3.0-150000.6.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"pam","fixed_in":["1.1.8-24.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"pam","fixed_in":["1.1.8-24.56.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"pam","fixed_in":["1.1.8-24.56.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"pam","fixed_in":["1.1.8-1ubuntu2.2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pam","fixed_in":["1.1.8-3.2ubuntu2.3+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pam","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"pam","fixed_in":["1.3.1-5ubuntu4.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"pam","fixed_in":["1.4.0-11ubuntu2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.2-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.3-r6"},{"fixed":"1.6.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cracklib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cracklib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-15.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-15.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-14.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-14.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-6+deb12u2"}]}],"versions":["1.5.2-6","1.5.2-6+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-9+deb11u2"}]}],"versions":["1.4.0-9","1.4.0-9+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-5.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-7.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-7.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-7.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-11.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-7.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-19.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-33.el8"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-r100071"},{"fixed":"1.5.2-r100072"},{"fixed":"1.5.2-r100074"},{"fixed":"1.5.2-r100073"},{"fixed":"1.5.2-r100075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-r100071"},{"fixed":"1.5.2-r100072"},{"fixed":"1.5.2-r100074"},{"fixed":"1.5.2-r100073"},{"fixed":"1.5.2-r100075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-linux-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-r70071"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-24.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-24.56.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-24.56.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-1ubuntu2.2+esm4"}]}],"versions":["1.1.3-8ubuntu3","1.1.3-10ubuntu1","1.1.3-11ubuntu1","1.1.8-1ubuntu1","1.1.8-1ubuntu2","1.1.8-1ubuntu2.1","1.1.8-1ubuntu2.2","1.1.8-1ubuntu2.2+esm1","1.1.8-1ubuntu2.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+esm5"}]}],"versions":["1.1.8-3.1ubuntu3","1.1.8-3.2ubuntu2","1.1.8-3.2ubuntu2.1","1.1.8-3.2ubuntu2.3","1.1.8-3.2ubuntu2.3+esm1","1.1.8-3.2ubuntu2.3+esm2","1.1.8-3.2ubuntu2.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+esm1"}]}],"versions":["1.1.8-3.2ubuntu3","1.1.8-3.2ubuntu4","1.1.8-3.6ubuntu1","1.1.8-3.6ubuntu2","1.1.8-3.6ubuntu2.18.04.1","1.1.8-3.6ubuntu2.18.04.2","1.1.8-3.6ubuntu2.18.04.3","1.1.8-3.6ubuntu2.18.04.4","1.1.8-3.6ubuntu2.18.04.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-5ubuntu4.7"}]}],"versions":["1.3.1-5ubuntu1","1.3.1-5ubuntu3","1.3.1-5ubuntu4","1.3.1-5ubuntu4.1","1.3.1-5ubuntu4.2","1.3.1-5ubuntu4.3","1.3.1-5ubuntu4.4","1.3.1-5ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-11ubuntu2.4"}]}],"versions":["1.3.1-5ubuntu11","1.4.0-10ubuntu1","1.4.0-10ubuntu2","1.4.0-11ubuntu1","1.4.0-11ubuntu2","1.4.0-11ubuntu2.1","1.4.0-11ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-5ubuntu4.7"}]}],"versions":["1.3.1-5ubuntu1","1.3.1-5ubuntu3","1.3.1-5ubuntu4","1.3.1-5ubuntu4.1","1.3.1-5ubuntu4.2","1.3.1-5ubuntu4.3","1.3.1-5ubuntu4.4","1.3.1-5ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-11ubuntu2.4"}]}],"versions":["1.3.1-5ubuntu11","1.4.0-10ubuntu1","1.4.0-10ubuntu2","1.4.0-11ubuntu1","1.4.0-11ubuntu2","1.4.0-11ubuntu2.1","1.4.0-11ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-1ubuntu2.2+esm4"}]}],"versions":["1.1.3-8ubuntu3","1.1.3-10ubuntu1","1.1.3-11ubuntu1","1.1.8-1ubuntu1","1.1.8-1ubuntu2","1.1.8-1ubuntu2.1","1.1.8-1ubuntu2.2","1.1.8-1ubuntu2.2+esm1","1.1.8-1ubuntu2.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+esm5"}]}],"versions":["1.1.8-3.1ubuntu3","1.1.8-3.2ubuntu2","1.1.8-3.2ubuntu2.1","1.1.8-3.2ubuntu2.3","1.1.8-3.2ubuntu2.3+esm1","1.1.8-3.2ubuntu2.3+esm2","1.1.8-3.2ubuntu2.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+esm1"}]}],"versions":["1.1.8-3.2ubuntu3","1.1.8-3.2ubuntu4","1.1.8-3.6ubuntu1","1.1.8-3.6ubuntu2","1.1.8-3.6ubuntu2.18.04.1","1.1.8-3.6ubuntu2.18.04.2","1.1.8-3.6ubuntu2.18.04.3","1.1.8-3.6ubuntu2.18.04.4","1.1.8-3.6ubuntu2.18.04.6"]}],"products":[{"vendor":"linux-pam","product":"linux-pam"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"}],"references":[{"url":"https://github.com/linux-pam/linux-pam","tags":["x_transferred","Product","package"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/18/3","tags":["x_transferred","Exploit","Mailing List","Patch","Release Notes","web"]},{"url":"https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0","tags":["x_transferred","Release Notes","web"]},{"url":"https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb","tags":["x_transferred","Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22365","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pcmw-6hxc-hqmx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-22365","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22365","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257722","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2438.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3163","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3163.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-22365","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1712671933.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1713333823.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1718202007.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1718796961.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1719569368.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1749570465.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1749571114.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600614.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790600758.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790601003.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22365.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-22365","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0030.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32746","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/18/3","tags":["web","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1096","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1129","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1130","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257722","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-16727","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-20943","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22300","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5099","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5100","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2438.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22365","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-19810","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3374","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5057","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3163.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3163","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240136-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217000","tags":["report"]},{"url":"https://bugzilla.suse.com/1218475","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22365","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240136-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240137-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-22365","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6588-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6588-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T00:00:00Z","modified":"2026-10-15T00:38:02.387Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T14:34:00.585327Z"}],"euvd":[{"id":"EUVD-2024-19924","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T00:00:00Z","modified":"2026-10-15T00:38:02Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:10.794682Z"}],"ghsa":[{"id":"GHSA-pcmw-6hxc-hqmx","title":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked...","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T09:31:38Z","modified":"2026-05-12T12:31:35Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T15:08:00.69632Z"}],"nvd":[{"id":"CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T08:15:52.203Z","modified":"2026-10-15T01:17:19.26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T14:09:34.891666Z"}],"osv":[{"id":"ALPINE-CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T08:15:52.203Z","modified":"2026-11-02T11:17:50.071282015Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-34156","title":"CVE-2024-22365 affecting package pam for versions less than 1.5.1-6","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T08:15:52Z","modified":"2026-04-21T04:27:03.241933Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-35100","title":"CVE-2024-22365 affecting package pam for versions less than 1.5.3-2","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T08:15:52Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"BELL-CVE-2024-22365","status":"published","published":"2024-01-18T05:58:39.54781Z","modified":"2026-01-26T09:42:50.688186Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T00:00:00Z","modified":"2026-10-28T10:40:04.903764022Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"DEBIAN-CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-02-06T08:15:52.203Z","modified":"2026-11-02T12:00:44.932366126Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1096","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with ~/tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with `pam_namespace` configured will cause the `openat()` in `protect_dir()` to block the attempt, causing a local denial of service.(CVE-2024-22365)","status":"published","published":"2024-01-26T11:06:32Z","modified":"2026-08-18T01:18:13.606558092Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1129","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with ~/tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with `pam_namespace` configured will cause the `openat()` in `protect_dir()` to block the attempt, causing a local denial of service.(CVE-2024-22365)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.852657202Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1130","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with ~/tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with `pam_namespace` configured will cause the `openat()` in `protect_dir()` to block the attempt, causing a local denial of service.(CVE-2024-22365)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.712478391Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:2438","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2024-09-16T15:37:36Z","modified":"2026-06-26T12:22:38.909183176Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3163","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2024-09-16T15:37:44Z","modified":"2026-03-18T11:31:12.397537Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2024-22365","title":"CVE-2024-22365 in linux-pam - Patched by Root","description":"Root has patched CVE-2024-22365 in the linux-pam package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:06:05Z","modified":"2026-09-29T11:15:07.553855567Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","status":"published","published":"2024-01-17T00:00:00Z","modified":"2026-04-22T14:40:05.373199Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:2438","title":"Moderate: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* pam: allowing unprivileged user to block another user namespace (CVE-2024-22365)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:43.274393773Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3163","title":"Moderate: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* pam: allowing unprivileged user to block another user namespace (CVE-2024-22365)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.903098426Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1712671933","title":"Fix CVE(s): CVE-2024-22365","description":"   * SECURITY UPDATE: denial of service (blocked login process) via mkfifo\n     - debian/patches-applied/CVE-2024-22365.patch: pam_namespace:\n       protect_dir(): use O_DIRECTORY to prevent local DoS situations\n     - CVE-2024-22365","status":"published","published":"2024-04-09T14:12:15Z","modified":"2026-06-04T10:03:34.646696Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1713333823","title":"Fix CVE(s): CVE-2024-22365","description":"   * Backport 031bb5a5d0d950253b68138b498dc93be69a64cb: fix CVE-2024-22365\n     - debian/patches-applied/CVE-2024-22365.patch: pam_namespace:\n       protect_dir(): use O_DIRECTORY to prevent local DoS situations\n     - CVE-2024-22365","status":"published","published":"2024-04-17T06:03:45Z","modified":"2026-06-04T10:04:14.579221Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1718202007","title":"pam: Fix of CVE-2024-22365","description":"- CVE-2024-22365: pam_namespace: protect_dir(): use O_DIRECTORY to prevent\n  local DoS situations","status":"published","published":"2024-06-12T14:20:10Z","modified":"2026-06-01T00:30:07.593657203Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1718796961","title":"pam: Fix of CVE-2024-22365","description":"- CVE-2024-22365: use O_DIRECTORY to prevent local DoS situations","status":"published","published":"2024-06-19T11:36:05Z","modified":"2026-06-01T00:33:22.565795104Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1719569368","title":"pam: Fix of CVE-2024-22365","description":"- CVE-2024-22365: use O_DIRECTORY to prevent local DoS situations","status":"published","published":"2024-06-28T10:09:31Z","modified":"2026-06-01T00:33:20.379420359Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1749570465","title":"pam: Fix of 2 CVEs","description":"- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2024-22365: fix potential DoS via mkfifo because the openat\n  call lacks O_DIRECTORY","status":"published","published":"2025-06-10T15:47:50Z","modified":"2026-06-01T00:33:27.462712006Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1749571114","title":"pam: Fix of 2 CVEs","description":"- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2024-22365: fix potential DoS via mkfifo because the openat\n  call lacks O_DIRECTORY","status":"published","published":"2025-06-10T15:58:38Z","modified":"2026-06-01T00:32:44.857036244Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1790600614","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-28T13:03:43Z","modified":"2026-10-26T09:43:55.799826458Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790600758","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-28T13:06:06Z","modified":"2026-10-26T09:43:12.384792553Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790601003","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-30T16:33:34Z","modified":"2026-10-26T09:43:55.560524321Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"DLA-4306-1","title":"pam - security update","status":"published","published":"2025-09-21T00:00:00Z","modified":"2026-03-09T02:10:58.676646Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2024-0030","title":"Updated pam packages fix a security vulnerability","description":"The updated packages fix a security vulnerability:\npam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS\nsituations. (CVE-2024-22365)\n","status":"published","published":"2024-02-09T01:34:03Z","modified":"2026-04-16T04:41:02.500359858Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13616-1","title":"pam-1.6.0-1.1 on GA media","description":"These are all security issues fixed in the pam-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:29.993856Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:3163","title":"Moderate: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* pam: allowing unprivileged user to block another user namespace (CVE-2024-22365)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:16.809606Z","modified":"2026-02-05T07:45:08.45646Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2024-22365","title":"CVE-2024-22365 in rootio-linux-pam - Patched by Root","description":"Root has patched CVE-2024-22365 in the rootio-linux-pam package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:20:14.415483Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2024-22365","title":"CVE-2024-22365 in rootio-pam - Patched by Root","description":"Root has patched CVE-2024-22365 in the rootio-pam package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2025-09-12T09:19:28Z","modified":"2026-07-20T14:00:17.284520337Z","updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2024-22365","title":"CVE-2024-22365 in rootio-pam - Patched by Root","description":"Root has patched CVE-2024-22365 in the rootio-pam package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2025-08-12T08:24:43Z","modified":"2026-07-21T14:00:18.327845712Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"SUSE-SU-2024:0136-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2024-22365: Fixed a local denial of service during PAM login\n  due to a missing check during path manipulation (bsc#1218475).\n- Check localtime_r() return value to fix crashing (bsc#1217000) \n","status":"published","published":"2024-01-18T08:54:02Z","modified":"2026-02-04T03:36:02.120833Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0136-2","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2024-22365: Fixed a local denial of service during PAM login\n  due to a missing check during path manipulation (bsc#1218475).\n- Check localtime_r() return value to fix crashing (bsc#1217000) \n","status":"published","published":"2024-01-18T08:54:26Z","modified":"2026-02-04T03:10:44.214183Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0137-1","title":"Security update for pam","description":"This update for pam fixes the following issues:\n\n- CVE-2024-22365: Fixed a local denial of service during PAM login\n  due to a missing check during path manipulation (bsc#1218475).\n","status":"published","published":"2024-01-18T08:55:42Z","modified":"2026-02-04T02:23:05.207614Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6588-1","title":"pam vulnerability","description":"Matthias Gerstner discovered that the PAM pam_namespace module incorrectly\nhandled special files when performing directory checks. A local attacker\ncould possibly use this issue to cause PAM to stop responding, resulting in\na denial of service.\n","status":"published","published":"2024-01-17T17:43:02Z","modified":"2026-04-22T10:44:08.391251Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6588-2","title":"pam vulnerability","description":"USN-6588-1 fixed a vulnerability in PAM. This update\nprovides the corresponding updates for Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Matthias Gerstner discovered that the PAM pam_namespace module incorrectly\n handled special files when performing directory checks. A local attacker\n could possibly use this issue to cause PAM to stop responding, resulting in\n a denial of service.\n","status":"published","published":"2024-03-26T08:09:02Z","modified":"2026-06-29T13:51:00.238844001Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}