Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu 24.10 USN-7059-2: OATH Toolkit file overwrite risk

ubuntu
Calendar Grey October 17, 2024
Dist Ubuntu Esm H88
The latest OATH Toolkit release fixes a vulnerability in Ubuntu 24.10 that permits file replacement by remote intruders.
OATH Toolkit could be made to overwrite files as the administrator.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 Summary: OATH Toolkit could be made to overwrite files as the administrator. Software Description: - oath-toolkit: Development files for the OATH Toolkit Liboath library Details: USN-7059-1 fixed a vulnerability in OATH Toolkit library. This update provides the corresponding update for Ubuntu 24.10. Original advisory details:  Fabian Vogt discovered that OATH Toolkit incorrectly handled file  permissions. A remote attacker could possibly use this issue to  overwrite root owned files, leading to a privilege escalation attack.  (CVE-2024-47191)

Topics%20covered

Topics Covered

security advisory privilege escalation file overwrite Ubuntu oath-toolkit

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10   liboath-dev                     2.6.11-3ubuntu1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7059-2

https://ubuntu.com/security/notices/USN-7059-1

  CVE-2024-47191

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory privilege escalation file overwrite Ubuntu oath-toolkit

Package Information

https://launchpad.net/ubuntu/+source/oath-toolkit/2.6.11-3ubuntu1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here