Go/github.com/ubuntu/authd CVE-2024-9312: medium 6.4, EPSS 0.28%
Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd
Action: Upgrade github.com/ubuntu/authd to 0.3.6 or later.
go get github.com/ubuntu/authd@v0.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.6 | - |
Fixed versions
| 0.3.6 |
Sources
- osv: GO-2024-3188
- nvd: CVE-2024-9312
- https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2
CVE-2024-9312 · published · modified · JSON