Nongnu vulnerabilities
We track 2 vulnerabilities in Nongnu products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2024.
2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score
Latest Nongnu vulnerabilities
- 7.1 High severity
oath_toolkit: Improper Limitation of a Pathname to a Restricted Directory
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.
- 7.1 High severity
Dmidecode: Relative Path Traversal
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerabilit