Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-6020

Опубликовано: 17 июн. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

РелизСтатусПримечание
devel

released

1.5.3-7ubuntu6
esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

released

1.4.0-11ubuntu2.6
noble

released

1.5.3-5ubuntu5.4
oracular

released

1.5.3-7ubuntu2.3
plucky

released

1.5.3-7ubuntu4.3

Показывать по

EPSS

Процентиль: 33%
0.00399
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
около 1 года назад

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS3: 7.8
nvd
около 1 года назад

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS3: 7.8
msrc
около 1 года назад

Linux-pam: linux-pam directory traversal

CVSS3: 7.8
debian
около 1 года назад

A flaw was found in linux-pam. The module pam_namespace may use access ...

rocky
10 месяцев назад

Important: pam security update

EPSS

Процентиль: 33%
0.00399
Низкий

7.8 High

CVSS3