CVE-2024-6126CWE-400

Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

Low · published July 3, 2024

CVSS v3.1
3.2
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-07-03T14:51Z
EPSS history
Timeline
  • 03 JUL 14:51Z
    Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option
    cvelistv5