Summary
Fabian Vogt discovered that OATH Toolkit incorrectly handled file
permissions. A remote attacker could possibly use this issue to
overwrite root owned files, leading to a privilege escalation attack.
(CVE-2024-47191)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | oath-toolkit | 2.6.7-3ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | oath-toolkit | 2.6.11-2.1ubuntu0.1 |
Vulnerabilities 1
-
High 7.1
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context…
References
-
report
https://ubuntu.com/security/CVE-2024-47191