Skip to content
OpenAdvisories
Unscored USN-7059-2 0 CVEs

oath-toolkit vulnerability

Published Oct 17, 2024 · Updated Feb 4, 2026

Summary

USN-7059-1 fixed a vulnerability in OATH Toolkit library. This
update provides the corresponding update for Ubuntu 24.10.

Original advisory details:

Fabian Vogt discovered that OATH Toolkit incorrectly handled file
permissions. A remote attacker could possibly use this issue to
overwrite root owned files, leading to a privilege escalation attack.
(CVE-2024-47191)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.10 oath-toolkit 2.6.11-3ubuntu1

References

  • report
    https://ubuntu.com/security/CVE-2024-47191