CVE-2024-5290

HIGH

8.8

Description

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published8/7/2024

Last Modified9/17/2024

Sourcenvd

Honeypot Sightings0

Affected Products

canonical:ubuntu_linuxw1.fi:wpa_supplicant

Weaknesses (CWE)

CWE-427CWE-427

References

https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613(security@ubuntu.com)

https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/(security@ubuntu.com)

https://ubuntu.com/security/notices/USN-6945-1(security@ubuntu.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.