module: github.com/google/fscrypt
package: github.com/google/fscrypt/pam
additional_packages:
- module: github.com/google/fscrypt
  package: github.com/google/fscrypt/security
  symbols:
  - UserKeyringID
versions:
- fixed: v0.2.4
description: |
  After dropping and then elevating process privileges euid, guid, and groups
  were not properly restored to their original values, allowing an unprivileged
  user to gain membership in the root group.
published: 2021-04-14T12:00:00Z
cve: CVE-2018-6558
symbols:
- NewHandle
- SetProcessPrivileges
- Handle.StopAsPamUser
links:
  commit: https://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b
  context:
  - https://github.com/google/fscrypt/issues/77