Unrated
logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, inc...
CVE-2024-45752
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-45752 logiops
- Ubuntu UBUNTU-CVE-2024-45752 logiops
Original description The description as published by the source.
logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.suse.com