VDB

DEBIAN-CVE-2024-6126

DEBIAN-CVE-2024-6126 PUBLISHED CVSS 3.200000047683716 LOW

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Risk Scores

CVSS 3.1
3.200000047683716
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:13cockpit0, 0
Debian:11cockpit310-1, 329-1, *
Debian:12cockpit287.1-0, 0, 287-1
Debian:14cockpit0, 0

Timeline

  • Jul 3, 2024 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›