https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:44:05 +0000 https://vulnerability.circl.lu/vuln/cve-2024-47191 <p><strong>Affected:</strong> nongnu oath_toolkit</p> <p>pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.</p> <p><strong>Affected:</strong> nongnu oath_toolkit</p> <p>pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.</p> https://vulnerability.circl.lu/vuln/cve-2024-47191 https://vulnerability.circl.lu/vuln/usn-7059-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: oath-toolkit, Ubuntu:24.04:LTS: oath-toolkit</p> <p>Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: oath-toolkit, Ubuntu:24.04:LTS: oath-toolkit</p> <p>Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191)</p> https://vulnerability.circl.lu/vuln/usn-7059-1