CVE-2018-6558

Опубликовано: 23 авг. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.9

EPSS Низкий

Описание

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).

Ссылки

https://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b
Patch
Third Party Advisory
https://github.com/google/fscrypt/commit/315f9b042237200174a1fb99427f74027e191d66
Patch
Third Party Advisory
https://github.com/google/fscrypt/issues/77
Issue Tracking
Third Party Advisory
https://launchpad.net/bugs/1787548
Issue Tracking
Patch
Third Party Advisory
https://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b
Patch
Third Party Advisory
https://github.com/google/fscrypt/commit/315f9b042237200174a1fb99427f74027e191d66
Patch
Third Party Advisory
https://github.com/google/fscrypt/issues/77
Issue Tracking
Third Party Advisory
https://launchpad.net/bugs/1787548
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:fscrypt:*:*:*:*:*:*:*:*

Версия до 0.2.4 (исключая)

EPSS

Процентиль: 43%

0.00206

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-6558

CVSS3: 6.5

ubuntu

больше 7 лет назад

CVE-2018-6558

CVSS3: 6.5

debian

больше 7 лет назад

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore ...

GHSA-qj26-7grj-whg3

CVSS3: 6.5

github

больше 4 лет назад

Privilege Escalation in fscrypt

EPSS

Процентиль: 43%

0.00206

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo