Логотип exploitDog
bind:CVE-2024-9312
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-9312

Количество 5

Количество 5

ubuntu логотип

CVE-2024-9312

больше 1 года назад

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-9312

больше 1 года назад

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-4gfw-wf7c-w6g2

больше 1 года назад

Authd allows attacker-controlled usernames to yield controllable UIDs

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0429-1

12 месяцев назад

Security update for govulncheck-vulndb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3911-1

больше 1 года назад

Security update for govulncheck-vulndb

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
github логотип
GHSA-4gfw-wf7c-w6g2

Authd allows attacker-controlled usernames to yield controllable UIDs

CVSS3: 7.5
0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0429-1

Security update for govulncheck-vulndb

12 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3911-1

Security update for govulncheck-vulndb

больше 1 года назад

Уязвимостей на страницу