CVE-2024-47191
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, i...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-47191 oath-toolkit Corrigé dans: 2.6.7-3.1+deb12u1
Références
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.com
- patch gitlab.com
- patch gitlab.com
- patch gitlab.com
- report gitlab.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web security.opensuse.org
- web nongnu.org
- web openwall.com