Lucene search

K
osvGoogleOSV:GHSA-QJ26-7GRJ-WHG3
HistoryJun 23, 2021 - 5:18 p.m.

Privilege Escalation in fscrypt

2021-06-2317:18:49
Google
osv.dev
6

0.001 Low

EPSS

Percentile

44.1%

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).

CPENameOperatorVersion
github.com/google/fscryptlt0.2.4

0.001 Low

EPSS

Percentile

44.1%