CVE-2018-6558

2018-08-2300:00:00

canonical

www.cve.org

0.001 Low

EPSS

Percentile

44.1%

JSON

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).

CNA Affected

[
  {
    "product": "fscrypt",
    "vendor": "The fscrypt Project",
    "versions": [
      {
        "status": "affected",
        "version": "before 0.2.4"
      }
    ]
  }
]