CVE-2024-5290
Ubuntu wpa_supplicant Shared Object Loading Privilege Escalation Vulnerability
Description
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.
INFO
Published Date :
Aug. 7, 2024, 9:16 a.m.
Last Modified :
Sept. 17, 2024, 1:09 p.m.
Source :
[email protected]
Remotely Exploitable :
No
Impact Score :
6.0
Exploitability Score :
2.0
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-5290.
| URL | Resource |
|---|---|
| https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 | Exploit Issue Tracking |
| https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ | Exploit Third Party Advisory |
| https://ubuntu.com/security/notices/USN-6945-1 | Vendor Advisory |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-5290 vulnerability anywhere in the article.
-
Kaspersky
Exploits and vulnerabilities in Q3 2024
Q3 2024 saw multiple vulnerabilities discovered in Windows and Linux subsystems that are not standard for cyberattacks. This is because operating system developers have been releasing new security mit ... Read more
-
Cybersecurity News
CVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access
A critical vulnerability, CVE-2024-7012, has been discovered in Foreman, a widely used open-source lifecycle management tool. This authentication bypass flaw, with a CVSS score of 9.8 (the highest sev ... Read more
-
Cybersecurity News
D-Link Won’t Fix 4 RCE Vulnerabilities in DIR-846W Router
Four severe security flaws have been found in the D-Link DIR-846W router, leaving users potentially exposed to remote attacks even after the device has reached its end-of-life.Security researchers hav ... Read more
-
Cybersecurity News
Intel SGX Security Compromised: Root Provisioning Key Extracted
Recently, researcher Mark Ermolov has successfully extracted Intel’s SGX Fuse Key0, also known as the Root Provisioning Key. This key, introduced with Intel’s Skylake processors, is a cornerstone of I ... Read more
-
Cybersecurity News
New PostgreSQL Threat: PG_MEM Malware Strikes Databases
Attack flow of PG_MEM | Image: Aqua NautilusA new and insidious threat has emerged, targeting the widely used PostgreSQL database management system. Aqua Nautilus researchers have identified a novel m ... Read more
-
Cybersecurity News
SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)
SonicWall, a prominent network security provider, has released a security advisory warning users of a critical vulnerability (CVE-2024-40766) affecting their SonicOS operating system. The vulnerabilit ... Read more
-
Cybersecurity News
CVE-2024-5290: Wi-Fi Flaw Leaves Millions Vulnerable to Root Takeover
Security researchers have uncovered a critical vulnerability in wpa_supplicant, a ubiquitous software component responsible for managing Wi-Fi connections on countless devices. The flaw, dubbed CVE-20 ... Read more
The following table lists the changes that have been made to the
CVE-2024-5290 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Sep. 17, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 No Types Assigned https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 Exploit, Issue Tracking Changed Reference Type https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ No Types Assigned https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ Exploit, Third Party Advisory Changed Reference Type https://ubuntu.com/security/notices/USN-6945-1 No Types Assigned https://ubuntu.com/security/notices/USN-6945-1 Vendor Advisory Added CWE NIST CWE-427 Added CPE Configuration AND OR *cpe:2.3:a:w1.fi:wpa_supplicant:-:*:*:*:*:*:*:* OR cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:* -
CVE Modified by [email protected]
Sep. 11, 2024
Action Type Old Value New Value Added Reference Canonical Ltd. https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ [No types assigned] -
CVE Received by [email protected]
Aug. 07, 2024
Action Type Old Value New Value Added Description An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist. Added Reference Canonical Ltd. https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 [No types assigned] Added Reference Canonical Ltd. https://ubuntu.com/security/notices/USN-6945-1 [No types assigned] Added CWE Canonical Ltd. CWE-427 Added CVSS V3.1 Canonical Ltd. AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-5290 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-5290
weaknesses.