CVEs-PoC/2024/CVE-2024-22365.md

CVE-2024-22365

Description

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.

POC

Reference

No PoCs from references.

Github

• https://github.com/GrigGM/05-virt-04-docker-hw
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/fokypoky/places-list