Privilege escalation in Ax25-Tools
CVE-2011-2910
The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.
Vulnerability class: Privilege Escalation
EPSS: 0.004 (30.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ax25-tools — versions before 0.0.8-13
- Linux-ax25 Ax25-tools
- Debian Debian_linux — versions 8.0, 9.0, 10.0
Weakness classification (CWE)
References
- secalert@redhat.com (Third Party Advisory, x_refsource_MISC)
- secalert@redhat.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)
- secalert@redhat.com (x_refsource_MISC, Broken Link)
Frequently asked questions
- What is CVE-2011-2910?
- CVE-2011-2910 is a medium-severity vulnerability in Ax25-Tools, classified under Improper Privilege Management. CVSS score: 6.7/10. Published 2019-11-15.
- How severe is CVE-2011-2910?
- Medium severity. CVSS v3 base score is 6.7 out of 10.