Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-29481

Опубликовано: 07 апр. 2025
Источник: ubuntu
Приоритет: negligible
EPSS Низкий
CVSS3: 6.2

Описание

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/xenial

needed

focal

ignored

end of standard support, was deferred [2025-11-24]
jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

1.5.0-3
esm-apps/focal

needed

focal

ignored

end of standard support, was deferred [2025-11-24]
jammy

needed

noble

needed

oracular

ignored

end of life, was deferred [2025-11-24]
plucky

ignored

end of life, was needed
questing

not-affected

1.5.0-3
upstream

released

1.5.0-3

Показывать по

EPSS

Процентиль: 25%
0.00085
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.3
redhat
около 1 года назад

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

CVSS3: 6.2
nvd
около 1 года назад

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

CVSS3: 6.2
msrc
11 месяцев назад

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

CVSS3: 6.2
debian
около 1 года назад

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker ...

CVSS3: 6.2
github
около 1 года назад

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

EPSS

Процентиль: 25%
0.00085
Низкий

6.2 Medium

CVSS3