Summary
James Henstridge discovered that provd incorrectly handled environment
variables. A local attacker could possibly use this issue to run arbitrary
programs and escalate privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | provd | 0.1.2+24.04 |
Vulnerabilities 1
-
High 8.8
An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate t…