PT-2024-31749 · Logiops+1 · Logiops+1

Wolfgang Frisch · Published 2024-09-19 · Updated 2024-09-25 · CVE-2024-45752

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: logiops versions 0.3.4 and earlier

Description: The issue allows any unprivileged user to configure the logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This enables privilege escalation with minimal user interaction.

Recommendations: For logiops versions 0.3.4 and earlier, consider disabling the unrestricted D-Bus service for the logid daemon until a patch is available to prevent malicious keyboard macro configuration and subsequent privilege escalation. Restrict access to the logid daemon configuration to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-45752

Affected Products

Debian

Logiops

References · 16

• https://osv.dev/vulnerability/CVE-2024-45752 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-45752 · Security Note
• https://ubuntu.com/security/CVE-2024-45752 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-45752 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-45752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45752 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-45752 · Vendor Advisory
• https://github.com/PixlOne/logiops/releases · Note
• https://twitter.com/cracbot/status/1838458391376859240 · Twitter Post
• https://twitter.com/CVEnew/status/1836790706708337151 · Twitter Post
• https://twitter.com/oktsec/status/1836806955156877334 · Twitter Post
• https://t.me/cvenotify/95286 · Telegram Post
• https://t.me/cvedetector/6061 · Telegram Post
• https://t.me/cvenotify/96003 · Telegram Post
• https://twitter.com/CveFindCom/status/1836791286034030741 · Twitter Post