Skip to content

Product

9front lib9p vulnerabilities

1 published CVE affecting 9front lib9p, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest 9front lib9p CVEs

Newest publication first

  1. CVE-2024-8158 User impersonation for lib9p based 9p fileservers

    Published
    HighCVSS 8.8 EPSS 0.38%

    A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user. This is due to lib9p not properly verifying that the uname given in the Tauth and Tattach 9p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.