CVE-2024-6126: Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option
A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pamenv's userreadenv option, which leads to a denial of service (DoS) attack.
Other sources
In the cockpit component pam-ssh-add uses a call to atoi() to convert the environment variable SSHAGENTPID to a integer. This assumes that this env variable has not been tampered with and it the env variable has been mangled this can lead to an overflow. The solution proposed is to replace it with a call to strtol() with error checking.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6126?
CVE-2024-6126 is classified as a denial of service (DoS) vulnerability.
How do I fix CVE-2024-6126?
To mitigate CVE-2024-6126, disable the pam_env's user_readenv option in the cockpit package configuration.
Who is affected by CVE-2024-6126?
CVE-2024-6126 affects systems utilizing the cockpit package where pam_env's user_readenv option is enabled.
What type of attack vector does CVE-2024-6126 introduce?
CVE-2024-6126 allows an authenticated user to kill processes, leading to potential denial of service (DoS) scenarios.
When was CVE-2024-6126 discovered?
CVE-2024-6126 was identified as a flaw in the cockpit package, although an exact discovery date is not provided in the available information.