CVE-2024-47191 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-47191 Interim 1 10 2026-03-05T02:04:23Z current 2024-10-04T23:10:35Z 2026-03-05T02:04:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-47191 pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RUGXPFX2SEWUYCGS26U3HXEGB2OEEATS/ E-Mail link for openSUSE-SU-2024:14389-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed liboath-devel liboath-devel-2.6.11.12-1.1 liboath-devel-2.6.11.12-160000.3.2 liboath0 liboath0-2.6.11.12-1.1 liboath0-2.6.11.12-160000.3.2 liboath0-2.6.11.12-slfo.1.1_2.1 libpskc-devel libpskc-devel-2.6.11.12-1.1 libpskc-devel-2.6.11.12-160000.3.2 libpskc0 libpskc0-2.6.11.12-1.1 libpskc0-2.6.11.12-160000.3.2 libpskc0-2.6.11.12-slfo.1.1_2.1 oath-toolkit oath-toolkit-2.6.11.12-1.1 oath-toolkit-2.6.11.12-160000.3.2 oath-toolkit-2.6.11.12-slfo.1.1_2.1 oath-toolkit-xml oath-toolkit-xml-2.6.11.12-1.1 oath-toolkit-xml-2.6.11.12-160000.3.2 oath-toolkit-xml-2.6.11.12-slfo.1.1_2.1 pam_oath pam_oath-2.6.11.12-1.1 pam_oath-2.6.11.12-160000.3.2 pam_oath-2.6.11.12-slfo.1.1_2.1 liboath-devel-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 liboath0-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libpskc-devel-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libpskc0-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 oath-toolkit-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 oath-toolkit-xml-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 pam_oath-2.6.11.12-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 liboath0-2.6.11.12-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 libpskc0-2.6.11.12-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 oath-toolkit-2.6.11.12-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 oath-toolkit-xml-2.6.11.12-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 pam_oath-2.6.11.12-slfo.1.1_2.1 as a component of SUSE Linux Micro 6.1 liboath-devel-2.6.11.12-1.1 as a component of openSUSE Tumbleweed liboath0-2.6.11.12-1.1 as a component of openSUSE Tumbleweed libpskc-devel-2.6.11.12-1.1 as a component of openSUSE Tumbleweed libpskc0-2.6.11.12-1.1 as a component of openSUSE Tumbleweed oath-toolkit-2.6.11.12-1.1 as a component of openSUSE Tumbleweed oath-toolkit-xml-2.6.11.12-1.1 as a component of openSUSE Tumbleweed pam_oath-2.6.11.12-1.1 as a component of openSUSE Tumbleweed liboath-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS liboath0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS oath-toolkit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS liboath-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS liboath0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS oath-toolkit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS liboath-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS liboath0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS oath-toolkit-xml as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS oath-toolkit as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS liboath-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS liboath0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS oath-toolkit as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS liboath-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 liboath0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 oath-toolkit-xml as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 oath-toolkit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 liboath-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 liboath0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 oath-toolkit-xml as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 oath-toolkit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpskc-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libpskc0 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 oath-toolkit as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libpskc0 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 oath-toolkit as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 liboath-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS liboath0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise Server 15 SP1-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS liboath-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS liboath0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise Server 15 SP2-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS liboath-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS liboath0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise Server 15 SP3-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS liboath-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS liboath0 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise Server 15 SP4-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server 15 SP4-LTSS liboath0 as a component of SUSE Linux Enterprise Server 15-LTSS oath-toolkit-xml as a component of SUSE Linux Enterprise Server 15-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server 15-LTSS oath-toolkit as a component of SUSE Linux Enterprise Server Teradata 15 SP4 liboath-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 liboath0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 oath-toolkit-xml as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 oath-toolkit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 liboath-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 liboath0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 oath-toolkit-xml as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 oath-toolkit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 liboath-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 liboath0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 oath-toolkit-xml as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 oath-toolkit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libpskc-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libpskc0 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 oath-toolkit as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libpskc-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 libpskc0 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 oath-toolkit as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 liboath-devel as a component of SUSE Manager Proxy 4.3 liboath0 as a component of SUSE Manager Proxy 4.3 oath-toolkit-xml as a component of SUSE Manager Proxy 4.3 oath-toolkit as a component of SUSE Manager Proxy 4.3 liboath-devel as a component of SUSE Manager Retail Branch Server 4.3 liboath0 as a component of SUSE Manager Retail Branch Server 4.3 oath-toolkit-xml as a component of SUSE Manager Retail Branch Server 4.3 oath-toolkit as a component of SUSE Manager Retail Branch Server 4.3 liboath-devel as a component of SUSE Manager Server 4.3 liboath0 as a component of SUSE Manager Server 4.3 oath-toolkit-xml as a component of SUSE Manager Server 4.3 oath-toolkit as a component of SUSE Manager Server 4.3 liboath-devel as a component of openSUSE Leap 15.5 liboath0 as a component of openSUSE Leap 15.5 libpskc-devel as a component of openSUSE Leap 15.5 libpskc0 as a component of openSUSE Leap 15.5 oath-toolkit as a component of openSUSE Leap 15.5 oath-toolkit-xml as a component of openSUSE Leap 15.5 pam_oath as a component of openSUSE Leap 15.5 liboath-devel as a component of openSUSE Leap 15.6 liboath0 as a component of openSUSE Leap 15.6 libpskc-devel as a component of openSUSE Leap 15.6 libpskc0 as a component of openSUSE Leap 15.6 oath-toolkit as a component of openSUSE Leap 15.6 oath-toolkit-xml as a component of openSUSE Leap 15.6 pam_oath as a component of openSUSE Leap 15.6 pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink. CVE-2024-47191 SUSE Linux Enterprise Server 16.0:liboath-devel-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:liboath0-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:libpskc-devel-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:libpskc0-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:oath-toolkit-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:oath-toolkit-xml-2.6.11.12-160000.3.2 SUSE Linux Enterprise Server 16.0:pam_oath-2.6.11.12-160000.3.2 SUSE Linux Micro 6.1:liboath0-2.6.11.12-slfo.1.1_2.1 SUSE Linux Micro 6.1:libpskc0-2.6.11.12-slfo.1.1_2.1 SUSE Linux Micro 6.1:oath-toolkit-2.6.11.12-slfo.1.1_2.1 SUSE Linux Micro 6.1:oath-toolkit-xml-2.6.11.12-slfo.1.1_2.1 SUSE Linux Micro 6.1:pam_oath-2.6.11.12-slfo.1.1_2.1 openSUSE Tumbleweed:liboath-devel-2.6.11.12-1.1 openSUSE Tumbleweed:liboath0-2.6.11.12-1.1 openSUSE Tumbleweed:libpskc-devel-2.6.11.12-1.1 openSUSE Tumbleweed:libpskc0-2.6.11.12-1.1 openSUSE Tumbleweed:oath-toolkit-2.6.11.12-1.1 openSUSE Tumbleweed:oath-toolkit-xml-2.6.11.12-1.1 openSUSE Tumbleweed:pam_oath-2.6.11.12-1.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:liboath-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:liboath0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oath-toolkit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oath-toolkit-xml SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:liboath-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:liboath0 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:oath-toolkit SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:oath-toolkit-xml SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:liboath-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:liboath0 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:oath-toolkit SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:oath-toolkit-xml SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:liboath-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:liboath0 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:oath-toolkit SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:oath-toolkit-xml SUSE Linux Enterprise Module for Basesystem 15 SP5:liboath-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:liboath0 SUSE Linux Enterprise Module for Basesystem 15 SP5:oath-toolkit SUSE Linux Enterprise Module for Basesystem 15 SP5:oath-toolkit-xml SUSE Linux Enterprise Module for Basesystem 15 SP6:liboath-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:liboath0 SUSE Linux Enterprise Module for Basesystem 15 SP6:oath-toolkit SUSE Linux Enterprise Module for Basesystem 15 SP6:oath-toolkit-xml SUSE Linux Enterprise Module for Package Hub 15 SP5:libpskc-devel SUSE Linux Enterprise Module for Package Hub 15 SP5:libpskc0 SUSE Linux Enterprise Module for Package Hub 15 SP5:oath-toolkit SUSE Linux Enterprise Module for Package Hub 15 SP6:libpskc0 SUSE Linux Enterprise Module for Package Hub 15 SP6:oath-toolkit SUSE Linux Enterprise Server 15 SP1-LTSS:liboath-devel SUSE Linux Enterprise Server 15 SP1-LTSS:liboath0 SUSE Linux Enterprise Server 15 SP1-LTSS:oath-toolkit SUSE Linux Enterprise Server 15 SP1-LTSS:oath-toolkit-xml SUSE Linux Enterprise Server 15 SP2-LTSS:liboath-devel SUSE Linux Enterprise Server 15 SP2-LTSS:liboath0 SUSE Linux Enterprise Server 15 SP2-LTSS:oath-toolkit SUSE Linux Enterprise Server 15 SP2-LTSS:oath-toolkit-xml SUSE Linux Enterprise Server 15 SP3-LTSS:liboath-devel SUSE Linux Enterprise Server 15 SP3-LTSS:liboath0 SUSE Linux Enterprise Server 15 SP3-LTSS:oath-toolkit SUSE Linux Enterprise Server 15 SP3-LTSS:oath-toolkit-xml SUSE Linux Enterprise Server 15 SP4-LTSS:liboath-devel SUSE Linux Enterprise Server 15 SP4-LTSS:liboath0 SUSE Linux Enterprise Server 15 SP4-LTSS:oath-toolkit SUSE Linux Enterprise Server 15 SP4-LTSS:oath-toolkit-xml SUSE Linux Enterprise Server 15-LTSS:liboath0 SUSE Linux Enterprise Server 15-LTSS:oath-toolkit SUSE Linux Enterprise Server 15-LTSS:oath-toolkit-xml SUSE Linux Enterprise Server Teradata 15 SP4:oath-toolkit SUSE Linux Enterprise Server for SAP Applications 15 SP2:liboath-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:liboath0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oath-toolkit SUSE Linux Enterprise Server for SAP Applications 15 SP2:oath-toolkit-xml SUSE Linux Enterprise Server for SAP Applications 15 SP3:liboath-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:liboath0 SUSE Linux Enterprise Server for SAP Applications 15 SP3:oath-toolkit SUSE Linux Enterprise Server for SAP Applications 15 SP3:oath-toolkit-xml SUSE Linux Enterprise Server for SAP Applications 15 SP4:liboath-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:liboath0 SUSE Linux Enterprise Server for SAP Applications 15 SP4:oath-toolkit SUSE Linux Enterprise Server for SAP Applications 15 SP4:oath-toolkit-xml SUSE Linux Enterprise Workstation Extension 15 SP5:libpskc-devel SUSE Linux Enterprise Workstation Extension 15 SP5:libpskc0 SUSE Linux Enterprise Workstation Extension 15 SP5:oath-toolkit SUSE Linux Enterprise Workstation Extension 15 SP6:libpskc-devel SUSE Linux Enterprise Workstation Extension 15 SP6:libpskc0 SUSE Linux Enterprise Workstation Extension 15 SP6:oath-toolkit SUSE Manager Proxy 4.3:liboath-devel SUSE Manager Proxy 4.3:liboath0 SUSE Manager Proxy 4.3:oath-toolkit SUSE Manager Proxy 4.3:oath-toolkit-xml SUSE Manager Retail Branch Server 4.3:liboath-devel SUSE Manager Retail Branch Server 4.3:liboath0 SUSE Manager Retail Branch Server 4.3:oath-toolkit SUSE Manager Retail Branch Server 4.3:oath-toolkit-xml SUSE Manager Server 4.3:liboath-devel SUSE Manager Server 4.3:liboath0 SUSE Manager Server 4.3:oath-toolkit SUSE Manager Server 4.3:oath-toolkit-xml openSUSE Leap 15.5:liboath-devel openSUSE Leap 15.5:liboath0 openSUSE Leap 15.5:libpskc-devel openSUSE Leap 15.5:libpskc0 openSUSE Leap 15.5:oath-toolkit openSUSE Leap 15.5:oath-toolkit-xml openSUSE Leap 15.5:pam_oath openSUSE Leap 15.6:liboath-devel openSUSE Leap 15.6:liboath0 openSUSE Leap 15.6:libpskc-devel openSUSE Leap 15.6:libpskc0 openSUSE Leap 15.6:oath-toolkit openSUSE Leap 15.6:oath-toolkit-xml openSUSE Leap 15.6:pam_oath important 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N