The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: canonical
Published: 2018-08-23T20:00:00Z
Updated: 2024-09-17T02:06:50.219Z
Reserved: 2018-02-02T00:00:00
Link: CVE-2018-6558
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-08-23T19:29:01.127
Modified: 2024-11-21T04:10:54.240
Link: CVE-2018-6558
Redhat
No data.