{"id":"CVE-2024-5290","aliases":["BELL-CVE-2024-5290","DEBIAN-CVE-2024-5290","DSA-5739-1","EUVD-2024-46526","GHSA-c2m5-cmpw-rjcx","OESA-2024-2142","UBUNTU-CVE-2024-5290","USN-6945-1"],"status":"published","title":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00652,"percentile":0.51543,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-427"],"published":"2024-08-06T00:00:00Z","modified":"2026-11-02T12:03:07Z","fixes":[{"ecosystem":"Alpaquita:23","package":"wpa_supplicant","fixed_in":["2.10-r5"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"wpa_supplicant","fixed_in":["2.11-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wpa","fixed_in":["2:2.10-12+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpa","fixed_in":["2:2.10-22"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.10-22"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"wpa","fixed_in":["2:2.9.0-21+deb11u2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"wpa_supplicant","fixed_in":["2.10-7.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"wpa_supplicant","fixed_in":["2.6-32.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"wpa_supplicant","fixed_in":["2.6-32.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"wpa_supplicant","fixed_in":["2.6-32.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"wpa_supplicant","fixed_in":["2.6-32.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wpa","fixed_in":["2.1-0ubuntu1.7+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wpa","fixed_in":["2.4-0ubuntu6.8+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wpa","fixed_in":["2:2.6-15ubuntu2.8+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"wpa","fixed_in":["2:2.9-1ubuntu4.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"wpa","fixed_in":["2:2.10-6ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"wpa","fixed_in":["2:2.10-21ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10-r4"},{"fixed":"2.10-r5"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10-r4"},{"fixed":"2.11-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-12+deb12u2"}]}],"versions":["2:2.10-12","2:2.10-12+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-22"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-22"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9.0-21+deb11u2"}]}],"versions":["2:2.9.0-21","2:2.9.0-21+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-12+deb12u2"}]}],"versions":["2:2.10-12","2:2.10-12+deb12u1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-7.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-32.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-32.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-32.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-32.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-0ubuntu1.7+esm5"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-0ubuntu6.8+esm1"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6","2.4-0ubuntu6.7","2.4-0ubuntu6.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-15ubuntu2.8+esm1"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6","2:2.6-15ubuntu2.7","2:2.6-15ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.4"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-6ubuntu2.1"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21ubuntu0.1"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-0ubuntu1.7+esm5"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-0ubuntu6.8+esm1"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6","2.4-0ubuntu6.7","2.4-0ubuntu6.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-15ubuntu2.8+esm1"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6","2:2.6-15ubuntu2.7","2:2.6-15ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.4"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-6ubuntu2.1"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21ubuntu0.1"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4"]}],"products":[{"vendor":"canonical ltd.","product":"wpa_supplicant"},{"vendor":"w1.fi","product":"wpa_supplicant"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613","tags":["Exploit","Issue Tracking","evidence","report"]},{"url":"https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/","tags":["Exploit","Third Party Advisory","advisory","evidence","report"]},{"url":"https://ubuntu.com/security/notices/USN-6945-1","tags":["Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5290","tags":["advisory"]},{"url":"https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation"},{"url":"https://github.com/advisories/GHSA-c2m5-cmpw-rjcx"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-5290","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-5290","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2142","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-5290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5290","tags":["report"]},{"url":"https://launchpad.net/bugs/2067613","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-5290","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T08:14:08.153Z","modified":"2024-09-18T15:39:53.818Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:34:01.286506Z"}],"euvd":[{"id":"EUVD-2024-46526","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T08:14:08Z","modified":"2024-09-18T15:39:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:20.979111Z"}],"ghsa":[{"id":"GHSA-c2m5-cmpw-rjcx","title":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T09:31:08Z","modified":"2024-09-11T18:32:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:58:14.100374Z"}],"nvd":[{"id":"CVE-2024-5290","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T09:16:05.553Z","modified":"2026-06-17T08:15:37.697Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:10:17.832118Z"}],"osv":[{"id":"BELL-CVE-2024-5290","status":"published","published":"2024-08-07T05:58:55.695159Z","modified":"2026-08-31T08:44:30.571568Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"CVE-2024-5290","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T09:16:05Z","modified":"2026-04-10T05:18:44.700406Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:44.451316Z"},{"id":"DEBIAN-CVE-2024-5290","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).     Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-07T09:16:05.553Z","modified":"2026-11-02T12:03:07.536046878Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"OESA-2024-2142","title":"wpa_supplicant security update","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\n\nSecurity Fix(es):\n\nAn issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).\n\n\n\n\nMembership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.(CVE-2024-5290)","status":"published","published":"2024-09-14T11:07:37Z","modified":"2026-08-18T01:18:37.008701571Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2024-5290","description":"An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.","status":"published","published":"2024-08-06T16:00:00Z","modified":"2026-04-22T15:18:53.559414Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"DSA-5739-1","title":"wpa - security update","status":"published","published":"2024-08-06T00:00:00Z","modified":"2026-03-09T02:08:53.066216Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"USN-6945-1","title":"wpa vulnerability","description":"Rory McNamara discovered that wpa_supplicant could be made to load \narbitrary shared objects by unprivileged users that have access to\nthe control interface. An attacker could use this to escalate privileges\nto root.\n","status":"published","published":"2024-08-06T16:18:20Z","modified":"2026-04-22T10:45:06.694495Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}