CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 0.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2	Exploit Mitigation Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-9312	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*

History

26 Aug 2025, 17:43

Type	Values Removed	Values Added
References	~~() https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2 -~~	() https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2 - Exploit, Mitigation, Vendor Advisory
References	~~() https://www.cve.org/CVERecord?id=CVE-2024-9312 -~~	() https://www.cve.org/CVERecord?id=CVE-2024-9312 - Third Party Advisory
CWE		CWE-335
CPE		cpe:2.3:a:canonical:authd::::::::
First Time		Canonical Canonical authd

Information

Published : 2024-10-10 14:15

Updated : 2025-08-26 17:43

NVD link : CVE-2024-9312

Mitre link : CVE-2024-9312

CVE.ORG link : CVE-2024-9312

JSON object : View

Products Affected

canonical

authd

CWE

CWE-286

Incorrect User Management

CWE-335

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

{"id": "CVE-2024-9312", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.5}]}, "published": "2024-10-10T14:15:05.863", "references": [{"url": "https://github.com/ubuntu/authd/security/advisories/GHSA-4gfw-wf7c-w6g2", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security@ubuntu.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-9312", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@ubuntu.com", "description": [{"lang": "en", "value": "CWE-286"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-335"}]}], "descriptions": [{"lang": "en", "value": "Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges."}, {"lang": "es", "value": "Authd, hasta la versi\u00f3n 0.3.6, no aleatorizaba lo suficiente los identificadores de usuario para evitar colisiones. Un atacante local que pudiera registrar nombres de usuario podr\u00eda falsificar el identificador de otro usuario y obtener sus privilegios."}], "lastModified": "2025-08-26T17:43:11.117", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:canonical:authd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2665677-2BEF-4230-AF87-5C0530CF7193", "versionEndExcluding": "0.3.6"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com"}