Uncontrolled Search Path Element

Summary

An issue was discovered in Ubuntu's "wpa_supplicant" that allows the loading of arbitrary shared objects. This vulnerability enables a local, unprivileged attacker to escalate privileges to the user that "wpa_supplicant" runs as, typically root. Membership in the "netdev" group or access to the D-Bus interface of "wpa_supplicant" allows an unprivileged user to specify an arbitrary path to a module to be loaded by the "wpa_supplicant" process. Other escalation paths may also exist.