PoC Index85,100 CVEs with PoCs

CVE-2024-5290

HIGH 7.8EPSS 0.7%

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

Affected
Canonical Ltd. · wpa_supplicant
CVSS v3.1 NVD
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1 UBUNTU
8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.65% chance of exploitation in the next 30 days, 50th percentile
Published
2024-08-07
Updated
2024-09-18

Proof-of-concept exploits (2)

Security advisories

References