| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/google/fscrypt | < 0.2.4 | 0.2.4 |
| fscrypt | < 0.2.4 | 0.2.4 |
The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free