CVE-2024-45752

Publication date 19 September 2024

Last updated 19 September 2024

Ubuntu priority

logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
logiops	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2024-45752
https://bugzilla.suse.com/show_bug.cgi?id=1226598
https://github.com/PixlOne/logiops/releases