oath_toolkit vulnerabilities

1 known vulnerability in oath_toolkit from Nongnu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  oath_toolkit: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-47191Oct 9, 2024Nongnu

  pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink.