« Volver al listado

CVE-2025-1390

Estado: AplazadaMedia (6.1)—

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Libcap — LibcapAILinux — PAM CAPAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-1390",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-1390",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-18T15:08:39.991616Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@openanolis.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@openanolis.org",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/libs/libcap/libcap.git/",
          "vendor": "OpenAnolis",
          "modules": [
            "pam_cap"
          ],
          "product": "Anolis OS",
          "versions": [
            {
              "status": "affected",
              "version": "2.73;0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "x86",
            "ARM"
          ],
          "packageName": "libcap",
          "programFiles": [
            "pam_cap/pam_cap.c"
          ],
          "collectionURL": "http://sites.google.com/site/fullycapable/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-02-18T03:15:10.447",
  "references": [
    {
      "url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=18804",
      "source": "security@openanolis.org"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@openanolis.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames."
    },
    {
      "lang": "es",
      "value": "El módulo PAM PAM_CAP.so de la configuración de LibCap admite nombres de grupo que comienzan con \"@\", durante el análisis real, las configuraciones que no comienzan con \"@\" se reconocen incorrectamente como nombres de grupo. Esto puede resultar en que los usuarios no intencionados se les otorgue un conjunto de capacidad heredado, lo que podría conducir a riesgos de seguridad. Los atacantes pueden explotar esta vulnerabilidad para lograr la escalada de privilegios locales en los sistemas donde /etc/security/capability.conf se utiliza para configurar los privilegios hereditarios de los usuarios mediante la construcción de nombres de usuario específicos."
    }
  ],
  "lastModified": "2026-06-17T08:39:02.830",
  "sourceIdentifier": "security@openanolis.org"
}