Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/ubuntu/authd

3 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 high
Registry
pkg.go.dev

Advisories 3

  • Improper Permission Management in SSH Session Handling

    Affected: fixed in 0.5.4.

  • Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions.

    Affected: fixed in 0.3.6; through 0.0.0-20230706090440-d8cb2d561419.

  • Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform…

    Affected: fixed in 0.0.0-20240930103526-63e527496b01; from 0.1.0, fixed in 0.3.5; fixed in 0.3.5.