The Fscrypt Project Fscrypt vulnerabilities

1 known vulnerability affecting the_fscrypt_project/fscrypt.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-6558MEDIUMCVSS 6.5vbefore 0.2.42018-08-23

CVE-2018-6558 [MEDIUM] CVE-2018-6558: The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary gro The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).