[{"vendor":"w1.fi","product":"wpa_supplicant","defaultStatus":"unknown","cpes":["cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*"],"versions":[{"version":"2:2.10-15","lessThan":"2:2.10-21ubuntu0.1","versionType":"semver","status":"affected"},{"version":"2:2.9.0-21build1","lessThan":"2:2.10-6ubuntu2.1","versionType":"semver","status":"affected"},{"version":"2:2.9-1ubuntu2","lessThan":"2:2.9-1ubuntu4.4","versionType":"semver","status":"affected"},{"version":"2.4-0ubuntu10","lessThan":"2:2.6-15ubuntu2.8+esm1","versionType":"semver","status":"affected"},{"version":"2.4-0ubuntu3","lessThan":"2.4-0ubuntu6.8+esm1","versionType":"semver","status":"affected"},{"version":"2.1-0ubuntu1","lessThan":"2.1-0ubuntu1.7+esm5","versionType":"semver","status":"affected"}]}]

{"timestamp":"2024-09-18T15:37:32.036314Z","id":"CVE-2024-5290","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Canonical Ltd.","product":"wpa_supplicant","defaultStatus":"unaffected","collectionURL":"https://launchpad.net/ubuntu/+source/","packageName":"wpa","modules":["runtime API to load OpenSC module or PKCS11 engine or module"],"platforms":["Linux"],"programFiles":["src/crypto/tls_openssl.c"],"versions":[{"version":"2:2.10-15","lessThan":"2:2.10-21ubuntu0.1","versionType":"semver","status":"affected"},{"version":"2:2.9.0-21build1","lessThan":"2:2.10-6ubuntu2.1","versionType":"semver","status":"affected"},{"version":"2:2.9-1ubuntu2","lessThan":"2:2.9-1ubuntu4.4","versionType":"semver","status":"affected"},{"version":"2.4-0ubuntu10","lessThan":"2:2.6-15ubuntu2.8+esm1","versionType":"semver","status":"affected"},{"version":"2.4-0ubuntu3","lessThan":"2.4-0ubuntu6.8+esm1","versionType":"semver","status":"affected"},{"version":"2.1-0ubuntu1","lessThan":"2.1-0ubuntu1.7+esm5","versionType":"semver","status":"affected"}]}]

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST CWE-427

AND
     OR
          *cpe:2.3:a:w1.fi:wpa_supplicant:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:*

https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 No Types Assigned

https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 Exploit, Issue Tracking

https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ No Types Assigned

https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ Exploit, Third Party Advisory

https://ubuntu.com/security/notices/USN-6945-1 No Types Assigned

https://ubuntu.com/security/notices/USN-6945-1 Vendor Advisory

Canonical Ltd. https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/ [No types assigned]

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).




Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

Canonical Ltd. AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Canonical Ltd. CWE-427

Canonical Ltd. https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613 [No types assigned]

Canonical Ltd. https://ubuntu.com/security/notices/USN-6945-1 [No types assigned]