{"id":"CVE-2024-6126","aliases":["ALSA-2024:9325","CLSA-2026-1781091230","DEBIAN-CVE-2024-6126","EUVD-2024-47977","GHSA-g6h4-j28x-38g5","MGASA-2025-0181","OESA-2024-1842","RHSA-2024:9325","RLSA-2024:9325","SUSE-SU-2024:2304-1","SUSE-SU-2024:2476-1","SUSE-SU-2024:2477-1","SUSE-SU-2024:2478-1","SUSE-SU-2024:2494-1","UBUNTU-CVE-2024-6126","openSUSE-SU-2024:0206-1","openSUSE-SU-2024:14096-1"],"status":"published","title":"Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","severity":{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00274,"percentile":0.20023,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2024-07-03T14:51:17Z","modified":"2026-11-02T12:03:15Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"cockpit","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-bridge","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-doc","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-packagekit","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-pcp","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-storaged","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-system","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cockpit-ws","fixed_in":["323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cockpit","fixed_in":["287.1-0+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cockpit","fixed_in":["320-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cockpit","fixed_in":["320-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"cockpit","fixed_in":["338-1.6.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"cockpit","fixed_in":["178-17.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"cockpit","fixed_in":["178-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"cockpit","fixed_in":["309-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"cockpit","fixed_in":["178-17.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"cockpit","fixed_in":["178-17.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-debuginfo","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-debugsource","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-packagekit","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-pcp","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-storaged","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-bridge","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debuginfo","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debugsource","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-doc","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-system","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"cockpit","fixed_in":["0:323.1-1.el9_5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"cockpit","fixed_in":["298-150500.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cockpit","fixed_in":["251.3-150300.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"cockpit","fixed_in":["251.3-150400.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"cockpit","fixed_in":["195.12-150300.10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"cockpit","fixed_in":["251.3-150400.6.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"cockpit","fixed_in":["320-bp156.2.6.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"cockpit","fixed_in":["320-bp156.2.6.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cockpit","fixed_in":["320-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"286.2-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"287.1-0+deb12u3"}]}],"versions":["287-1","287.1-0+deb12u1","287.1-0+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"320-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"320-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"338-1.6.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"178-17.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"178-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"309-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"178-17.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"178-17.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-system","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"cockpit-ws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:323.1-1.el9_5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"298-150500.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"251.3-150300.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"251.3-150400.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"195.12-150300.10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"251.3-150400.6.7.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["151-1","156-1","157-1","158-1","160-1","161-1","162-1","163-1","164-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["202.1-1","204-1","206-1","207-1","208-1","210-1","211-1","212-1","213-1","214.1-1","215-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["252-1","256-1","257-1","258-1","259-1","260-1","261-1","262-1","263-1","264-1","264-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["300.1-1","303-1","304-1","305-1","306-1","307-1","308-1","309-1","310.1-1","311-1","312-1build2","314-1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"320-bp156.2.6.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"320-bp156.2.6.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"320-1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:9325","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-6126","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292897","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6126","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g6h4-j28x-38g5"},{"url":"https://bugzilla.redhat.com/2292897","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9325.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781091230.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4802","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-6126","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0181.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33368","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1842","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-34216","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-46354","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-55860","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9325.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-6126","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9325","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242304-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226040","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6126","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242476-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242478-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242494-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-6126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2290859","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CNZTH7PKY4BMSDPSUA32JS3BZQRTKTGF/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227299","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-6126","title":"Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T14:51:17.88Z","modified":"2026-11-07T11:32:25.041Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2024-47977","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T14:51:17Z","modified":"2026-11-07T11:32:25Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-g6h4-j28x-38g5","title":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any...","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T18:48:26Z","modified":"2024-11-12T15:30:32Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:58:46.999726Z"}],"nvd":[{"id":"CVE-2024-6126","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T15:15:06.47Z","modified":"2026-11-07T12:17:40.58Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T14:05:24.982965Z"}],"osv":[{"id":"DEBIAN-CVE-2024-6126","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T15:15:06.47Z","modified":"2026-11-08T09:47:24.757594004Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"OESA-2024-1842","title":"cockpit security update","description":"Cockpit makes GNU/Linux discoverable. See Linux server in a web browser and perform system tasks with a mouse. It’s easy to start containers, administer storage, configure networks, and inspect logs with this package.\n\nSecurity Fix(es):\n\nA flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env\u0026apos;s user_readenv option, which leads to a denial of service (DoS) attack.(CVE-2024-6126)","status":"published","published":"2024-07-12T11:07:18Z","modified":"2026-08-18T01:18:30.562731536Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:9325","title":"Red Hat Security Advisory: cockpit security update","status":"published","published":"2024-11-12T17:56:40Z","modified":"2026-06-26T12:22:23.78652731Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"UBUNTU-CVE-2024-6126","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T15:15:00Z","modified":"2025-10-24T05:06:45Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"ALSA-2024:9325","title":"Low: cockpit security update","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.  \n\nSecurity Fix(es):  \n\n  * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:27.295842891Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2026-1781091230","title":"cockpit: Fix of 2 CVEs","description":"- CVE-2026-4802: fix shell command injection via boot descriptor query string in\n  the system logs page by quoting journalctl arguments using shlex-style single-\n  quote escaping\n\n- CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream\n  follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID","status":"published","published":"2026-10-06T17:11:01Z","modified":"2026-10-26T09:43:58.332976575Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CVE-2024-6126","description":"A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.","status":"published","published":"2024-07-03T15:15:06Z","modified":"2026-04-16T04:32:43.023100507Z","updated_at":"2026-11-02T15:44:45.107804Z"},{"id":"MGASA-2025-0181","title":"Updated cockpit packages fix security vulnerability \u0026 bug","description":"Mageia's internal bug: In the current version you can't login in the web\ninterface with firefox or chromium-browser packaged by Mageia. This\nupdate fixes the issue, but it is reported that could need to reboot and\nclear cookies from your browser.\nA flaw was found in the cockpit package. This flaw allows an\nauthenticated user to kill any process when enabling the pam_env's\nuser_readenv option, which leads to a denial of service (DoS) attack -\nCVE-2024-6126.\nPlease note that you need to edit /etc/nsswitch.conf as recommended in\nhttps://bugs.mageia.org/show_bug.cgi?id=33368#c18.\n","status":"published","published":"2025-06-09T18:14:56Z","modified":"2026-04-16T04:43:39.924861317Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2024:0206-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- new version 320:\n\n  * pam-ssh-add: Fix insecure killing of session ssh-agent\n    (boo#1226040, CVE-2024-6126)\n\n- changes in older versions:\n\n  * Storage: Btrfs snapshots\n  * Podman: Add image pull action\n  * Files: Bookmark support\n  * webserver: System user changes\n  * Metrics: Grafana setup now prefers Valkey\n- Invalid json against the storaged manifest boo#1227299\n","status":"published","published":"2024-07-21T12:01:36Z","modified":"2026-02-04T04:13:22.635128Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14096-1","title":"cockpit-320-1.1 on GA media","description":"These are all security issues fixed in the cockpit-320-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-04T00:00:00Z","modified":"2026-02-04T03:39:18.634244Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:9325","title":"Low: cockpit security update","description":"Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.\n\nSecurity Fix(es):\n\n* cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-05T04:00:10.230666Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:2304-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).\n","status":"published","published":"2024-07-04T15:22:50Z","modified":"2026-02-04T03:57:53.19908Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2476-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).","status":"published","published":"2024-07-13T01:03:55Z","modified":"2026-02-04T02:36:47.088105Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2477-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).","status":"published","published":"2024-07-13T02:33:41Z","modified":"2026-02-04T02:36:26.84929Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2478-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).","status":"published","published":"2024-07-14T20:38:39Z","modified":"2026-02-04T04:37:20.531261Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2494-1","title":"Security update for cockpit","description":"This update for cockpit fixes the following issues:\n\n- CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).","status":"published","published":"2024-07-16T05:33:47Z","modified":"2026-02-04T02:35:22.643331Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}