Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.5%	CVE-2025-6020Red Hat Enterprise Linux 10 linux-pam · Path Traversal High7.8EPSS 0.5%2025-06-17CVE Database V5CVE-2025-6020 A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions. EPSS 0.5%Vulnerability	CVE Database V5	2025-06-17
Medium	5.5	EPSS 0.5%	CVE-2024-22365linux-pam · Improper Control of a Resource Through its Lifetime Medium5.5EPSS 0.5%2024-02-06CVE Database V5CVE-2024-22365 linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. EPSS 0.5%Vulnerability CWE-664	CVE Database V5	2024-02-06

Page 1 of 1