CVE-2018-6558: Medium severity Google Fscrypt vulnerability
Published Aug 23, 2018
·Updated
The pamfscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).
Affected Software
2 affected componentsFixes available
Google Fscrypt<0.2.4
go/github.com/google/fscrypt<0.2.4
0.2.4
Remediation
Patch Available
Event History
Aug 23, 2018
CVE Published
07:29 PM
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Jun 23, 2021
Advisory Published
via GitHub·05:18 PM
Frequently Asked Questions
1
What is the severity of CVE-2018-6558?
CVE-2018-6558 has a high severity rating due to the potential privilege escalation it allows.
2
How do I fix CVE-2018-6558?
To fix CVE-2018-6558, upgrade the fscrypt module to version 0.2.4 or later.
3
What applications are affected by CVE-2018-6558?
CVE-2018-6558 affects applications that use Linux-PAM for authentication.
4
What can an attacker do with CVE-2018-6558?
An attacker can gain elevated privileges through a successful login due to incorrect restoration of group IDs.
5
Who is responsible for the CVE-2018-6558 vulnerability?
The CVE-2018-6558 vulnerability is associated with the pam_fscrypt module developed by Google.