CVE-2024-47191
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, i...
Original description
The description as published by the source.
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-47191 oath-toolkit Fixed in: 2.6.7-3.1+deb12u1
References
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.com
- patch gitlab.com
- patch gitlab.com
- patch gitlab.com
- report gitlab.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web security.opensuse.org
- web nongnu.org
- web openwall.com