Marco Trevisan privately on Muck Rack

Marco Trevisan privately

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Marco Trevisan

Contact Marco Trevisan, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Re: Security vulnerability in fprintd

|
By Yaron Shahrabani, Hi Yaron, Yaron Shahrabani ha, Marco Trevisan privately
| seclists.org
oss-sec mailing list archives From: Yaron Shahrabani <sh.yaron () gmail com> Date: Fri, 14 Jun 2024 10:19:40 +0300 Thank you all for your response and care. I would like to point out that although I managed to demonstrate this vulnerability with a virtual terminal in a graphical interface it also applies to TTY, so even if I don't have any graphical interface I can still exploit this vulnerability.
Open in Who Shared View Duplicates (2) Issue with article?

Re: Security vulnerability in fprintd

|
By Mark Esler, Hi Yaron, Yaron Shahrabani ha, Marco Trevisan privately
| seclists.org
oss-sec mailing list archives From: Mark Esler <mark.esler () canonical com> Date: Thu, 13 Jun 2024 15:10:42 -0500 At Marco's request, I am asking MITRE to either revoke CVE-2024-37408 or for MITRE to transfer CVE ownership to Canonical's CNA for revocation. On Thu, Jun 13, 2024 at 06:40:51PM +0200, Marco Trevisan wrote: Hi Yaron, Thanks for taking time to look into this issue.
Open in Who Shared Issue with article?

Re: Security vulnerability in fprintd

|
By Marco Trevisan, Marco Trevisan privately, Hi Yaron, Yaron Shahrabani ha
| seclists.org
oss-sec mailing list archives From: Marco Trevisan <mail () 3v1n0 net> Date: Thu, 13 Jun 2024 18:40:51 +0200 Hi Yaron, Thanks for taking time to look into this issue. We appreciate the analysis you did, although, as we already shared privately, we don't think that this is a fprintd issue but rather an architectural issue of how PAM modules interact with sudo that, by design, does not permit an additional attention mechanism beyond displaying a prompt in the terminal.
Open in Who Shared Issue with article?
See all 5 articles
 •  Privacy  •  Terms  •  Security and Legal  •   •   •   • 

© 2026 Muck Rack

SOC 2® Certified