https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T11:10:49.406023+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-47191 CVE-2024-47191 2026-10-07T11:10:50.004377+00:00

Affected: nongnu oath_toolkit

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.

 https://vulnerability.circl.lu/vuln/usn-7059-1 USN-7059-1 — oath-toolkit vulnerability 2026-10-07T11:10:50.004622+00:00

Affected: Ubuntu:22.04:LTS: oath-toolkit, Ubuntu:24.04:LTS: oath-toolkit

Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191)