PatchTheCVECVE-2024-45752: logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemo
CVE-2024-45752 is a high-severity flaw (CVSS 8.5) affecting logiops. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.5 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 82%) |
| CISA exploited list | No |
| Weakness | CWE-269 |
| Published | 2024-09-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-45752?
logiops: upgrade to newer than 0.3.4. Exact commands for each OS are on this page.
Is CVE-2024-45752 being exploited?
CVE-2024-45752 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-45752 affect?
CVE-2024-45752 affects logiops. Severity is high (CVSS 8.5). logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minima
How urgent is CVE-2024-45752?
Priority 34/100. High severity