Description
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =1.5.2-6 || =1.5.2-6+deb12u1 || >=0 <1.5.2-6+deb12u2 | 1.5.2-6+deb12u2 |
 alpine v3.20 | | =1.1.3-r0 || =1.1.3-r1 || =1.1.3-r2 || =1.1.3-r3 || =1.1.3-r4 || =1.1.5-r0 || =1.1.6-r0 || =1.1.8-r0 || =1.1.8-r1 || =1.1.8-r2 || =1.2.0-r0 || =1.2.1-r0 || =1.2.1-r1 || =1.3.0-r0 || =1.3.0-r1 || =1.3.1-r0 || =1.3.1-r1 || =1.3.1-r2 || =1.3.1-r3 || =1.3.1-r4 || =1.4.0-r0 || =1.4.0-r1 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r10 || =1.5.2-r2 || =1.5.2-r3 || =1.5.2-r4 || =1.5.2-r5 || =1.5.2-r6 || =1.5.2-r7 || =1.5.2-r8 || =1.5.2-r9 || =1.5.3-r0 || =1.5.3-r1 || =1.5.3-r2 || =1.5.3-r3 || =1.5.3-r4 || =1.5.3-r5 || =1.5.3-r6 || =1.5.3-r7 || =1.5.3-r8 || >=0 <1.6.0-r0 | 1.6.0-r0 |
alpine v3.21 | | =1.1.3-r0 || =1.1.3-r1 || =1.1.3-r2 || =1.1.3-r3 || =1.1.3-r4 || =1.1.5-r0 || =1.1.6-r0 || =1.1.8-r0 || =1.1.8-r1 || =1.1.8-r2 || =1.2.0-r0 || =1.2.1-r0 || =1.2.1-r1 || =1.3.0-r0 || =1.3.0-r1 || =1.3.1-r0 || =1.3.1-r1 || =1.3.1-r2 || =1.3.1-r3 || =1.3.1-r4 || =1.4.0-r0 || =1.4.0-r1 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r10 || =1.5.2-r2 || =1.5.2-r3 || =1.5.2-r4 || =1.5.2-r5 || =1.5.2-r6 || =1.5.2-r7 || =1.5.2-r8 || =1.5.2-r9 || =1.5.3-r0 || =1.5.3-r1 || =1.5.3-r2 || =1.5.3-r3 || =1.5.3-r4 || =1.5.3-r5 || =1.5.3-r6 || =1.5.3-r7 || =1.5.3-r8 || >=0 <1.6.0-r0 | 1.6.0-r0 |
alpine v3.22 | | =1.1.3-r0 || =1.1.3-r1 || =1.1.3-r2 || =1.1.3-r3 || =1.1.3-r4 || =1.1.5-r0 || =1.1.6-r0 || =1.1.8-r0 || =1.1.8-r1 || =1.1.8-r2 || =1.2.0-r0 || =1.2.1-r0 || =1.2.1-r1 || =1.3.0-r0 || =1.3.0-r1 || =1.3.1-r0 || =1.3.1-r1 || =1.3.1-r2 || =1.3.1-r3 || =1.3.1-r4 || =1.4.0-r0 || =1.4.0-r1 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r10 || =1.5.2-r2 || =1.5.2-r3 || =1.5.2-r4 || =1.5.2-r5 || =1.5.2-r6 || =1.5.2-r7 || =1.5.2-r8 || =1.5.2-r9 || =1.5.3-r0 || =1.5.3-r1 || =1.5.3-r2 || =1.5.3-r3 || =1.5.3-r4 || =1.5.3-r5 || =1.5.3-r6 || =1.5.3-r7 || =1.5.3-r8 || >=0 <1.6.0-r0 | 1.6.0-r0 |
debian 11 | | =1.4.0-9 || =1.4.0-9+deb11u1 || >=0 <1.4.0-9+deb11u2 | 1.4.0-9+deb11u2 |
debian 13 | | | 1.5.3-4 |
debian 14 | | | 1.5.3-4 |
alpine v3.23 | | =1.1.3-r0 || =1.1.3-r1 || =1.1.3-r2 || =1.1.3-r3 || =1.1.3-r4 || =1.1.5-r0 || =1.1.6-r0 || =1.1.8-r0 || =1.1.8-r1 || =1.1.8-r2 || =1.2.0-r0 || =1.2.1-r0 || =1.2.1-r1 || =1.3.0-r0 || =1.3.0-r1 || =1.3.1-r0 || =1.3.1-r1 || =1.3.1-r2 || =1.3.1-r3 || =1.3.1-r4 || =1.4.0-r0 || =1.4.0-r1 || =1.5.1-r0 || =1.5.1-r1 || =1.5.2-r0 || =1.5.2-r1 || =1.5.2-r10 || =1.5.2-r2 || =1.5.2-r3 || =1.5.2-r4 || =1.5.2-r5 || =1.5.2-r6 || =1.5.2-r7 || =1.5.2-r8 || =1.5.2-r9 || =1.5.3-r0 || =1.5.3-r1 || =1.5.3-r2 || =1.5.3-r3 || =1.5.3-r4 || =1.5.3-r5 || =1.5.3-r6 || =1.5.3-r7 || =1.5.3-r8 || >=0 <1.6.0-r0 | 1.6.0-r0 |
 rpm rhel7 | | - | - |
rpm rhel9 | | | 0:1.5.1-19.el9 |
