Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-2713

Опубликовано: 28 мар. 2025
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:*
Версия до 20240325.0 (исключая)

EPSS

Процентиль: 4%
0.00019
Низкий

7.8 High

CVSS3

Дефекты

CWE-266
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.8
ubuntu
11 месяцев назад

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.

CVSS3: 7.8
debian
11 месяцев назад

Google gVisor's runsc component exhibited a local privilege escalation ...

CVSS3: 7.8
github
11 месяцев назад

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.

EPSS

Процентиль: 4%
0.00019
Низкий

7.8 High

CVSS3

Дефекты

CWE-266
NVD-CWE-noinfo