Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrq3-m48q-67j2

Опубликовано: 22 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

EPSS

Процентиль: 33%
0.0013
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.7
ubuntu
около 6 лет назад

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

CVSS3: 6.7
nvd
около 6 лет назад

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

CVSS3: 6.7
debian
около 6 лет назад

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check ...

EPSS

Процентиль: 33%
0.0013
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269