[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frgheLPW3moohaLoLGafc0p4Z7MmU_jenJVLS_RB8eK0":3,"g5a-risk:CVE-2024-22365":129},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":39,"affectedProducts":40,"affectedProductsCount":45,"references":46,"referencesCount":78,"weaknesses":79,"weaknessesCount":45,"isActivelyExploited":88,"cisaInfo":27,"otxData":27,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":124,"notableEvents":125},"CVE-2024-22365","What is CVE-2024-22365?","linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.","linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_...","2024-02-06T08:15:52.203","2025-11-03T19:15:42.857",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],0.00459,[38,38,38,38,38,38,36],0.00455,"Medium",[41],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"linux-pam","*","cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*",1,[47,55,60,63,66,68,70,72,74],{"url":48,"source":49,"tags":50},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F01\u002F18\u002F3","Openwall",[51,52,53,54],"Exploit","Mailing List","Patch","Release Notes",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Flinux-pam\u002Flinux-pam","GitHub",[59],"Product",{"url":61,"source":57,"tags":62},"https:\u002F\u002Fgithub.com\u002Flinux-pam\u002Flinux-pam\u002Fcommit\u002F031bb5a5d0d950253b68138b498dc93be69a64cb",[53],{"url":64,"source":57,"tags":65},"https:\u002F\u002Fgithub.com\u002Flinux-pam\u002Flinux-pam\u002Freleases\u002Ftag\u002Fv1.6.0",[54],{"url":48,"source":49,"tags":67},[51,52,53,54],{"url":56,"source":57,"tags":69},[59],{"url":61,"source":57,"tags":71},[53],{"url":64,"source":57,"tags":73},[54],{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F09\u002Fmsg00021.html","Debian",[],9,[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-664","Improper Control of a Resource Through its Lifetime","The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.","Resources often have explicit instructions on how to be created, used and destroyed. When code does not follow these instructions, it can lead to unexpected behaviors and potentially exploitable states.\nEven without explicit instructions, various principles are expected to be adhered to, such as \"Do not use an object until after its creation is complete,\" or \"do not use an object after it has been slated for destruction.\"","Draft","Pillar","Simple",false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2024-22365? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-22365, a medium severity cyber security vulnerability from 2024. linux-pam (aka Linux PAM) before 1.6.0 allows attackers t...","CVE-2024-22365, CVE-2024-22365 vulnerability, CVE-2024-22365 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, linux-pam security, linux-pam vulnerability","\u002Fwhat-is\u002Fcve-2024-22365",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-22365","Cybersecurity","CVE-2024-22365, CVE-2024-22365 vulnerability, CVE-2024-22365 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":27,"Negate":27,"Nodes":117},[118],{"Operator":119,"Negate":88,"CPEMatch":120},"OR",[121],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":123,"VersionEndIncluding":27},"8B735A60-FB87-4597-BFF4-A6ED201E71A1","1.6.0",[],[],{"lastModified":11,"cacheTime":127,"version":128},1793212712883,"2.0",{"score":130,"band":131,"action":132,"scoredAt":133},39,"Low","Monitor","2026-07-01T10:31:51.930195+00:00"]