CVE-2024-6126

published 2024-07-03

CVE-2024-6126: A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which…

Priority P4 9 low 3.2 CVSS 3.1

AV L AC L PR L UI R S C C N I N A L

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
agentejo	cockpit	>= 0 < 287.1-0+deb12u3	287.1-0+deb12u3
agentejo	cockpit	>= 0 < 320-1	320-1
agentejo	cockpit	>= 0 < 320-1	320-1
debian	cockpit	< cockpit 287.1-0+deb12u3 (bookworm)	cockpit 287.1-0+deb12u3 (bookworm)

CVSS provenance

nvd v3.1 3.2 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L

osv 3.2 LOW

vendor_debian 3.2 LOW

vendor_redhat 3.2 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400