{"id":"USN-7059-2","aliases":[],"status":"published","title":"oath-toolkit vulnerability","description":"USN-7059-1 fixed a vulnerability in OATH Toolkit library. This\nupdate provides the corresponding update for Ubuntu 24.10.\n\nOriginal advisory details:\n\n Fabian Vogt discovered that OATH Toolkit incorrectly handled file\n permissions. A remote attacker could possibly use this issue to\n overwrite root owned files, leading to a privilege escalation attack.\n (CVE-2024-47191)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-10-17T16:10:37.537267Z","modified":"2026-02-04T03:25:25Z","fixes":[{"ecosystem":"Ubuntu:24.10","package":"oath-toolkit","fixed_in":["2.6.11-3ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:24.10","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.11-3ubuntu1"}]}],"versions":["2.6.11-2.1build3","2.6.11-3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-7059-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47191","tags":["report"]}],"sources":{"osv":[{"id":"USN-7059-2","title":"oath-toolkit vulnerability","description":"USN-7059-1 fixed a vulnerability in OATH Toolkit library. This\nupdate provides the corresponding update for Ubuntu 24.10.\n\nOriginal advisory details:\n\n Fabian Vogt discovered that OATH Toolkit incorrectly handled file\n permissions. A remote attacker could possibly use this issue to\n overwrite root owned files, leading to a privilege escalation attack.\n (CVE-2024-47191)\n","status":"published","published":"2024-10-17T16:10:37.537267Z","modified":"2026-02-04T03:25:25.417439Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}