CVE-2024-5290
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-5290
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5290.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-5290
- Downstream
- Published
- 2024-08-07T09:16:05Z
- Modified
- 2025-08-09T19:01:26Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Ubuntu wpasupplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpasupplicant runs as (usually root).
Membership in the netdev group or access to the dbus interface of wpasupplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpasupplicant process; other escalation paths might exist.
- References