cve/2024/CVE-2024-5290.md

### [CVE-2024-5290](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5290)
![](https://img.shields.io/static/v1?label=Product&message=wpa_supplicant&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2%3A2.10-15%3C%202%3A2.10-21ubuntu0.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-427%20Uncontrolled%20Search%20Path%20Element&color=brighgreen)

### Description

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

### POC

#### Reference
- https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613
- https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds