« Volver al listado

CVE-2025-9810

Estado: ModificadaMedia (5.8)—

TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Antirez — Linenoise

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-9810",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-9810",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-09-02T16:13:30.664402Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "96148269-fe82-4198-b1bf-3a73ce8bc92e",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.8,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "96148269-fe82-4198-b1bf-3a73ce8bc92e",
      "affectedData": [
        {
          "vendor": "antirez",
          "modules": [
            "linenoiseHistorySave"
          ],
          "product": "linenoise",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            }
          ],
          "programFiles": [
            "linenoise.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-09-01T19:15:32.573",
  "references": [
    {
      "url": "https://github.com/antirez/linenoise/blob/master/linenoise.c#L1321",
      "tags": [
        "Product"
      ],
      "source": "96148269-fe82-4198-b1bf-3a73ce8bc92e"
    },
    {
      "url": "https://github.com/antirez/linenoise/pull/202",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "96148269-fe82-4198-b1bf-3a73ce8bc92e"
    },
    {
      "url": "https://github.com/antirez/linenoise/blob/4111f1d6cd29e136b4e86a25d1dd859a1e00813b/linenoise.c#L1321",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/antirez/linenoise/commit/f2558e1e588b1ba384ec73a2cf5c9a46409753db",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "96148269-fe82-4198-b1bf-3a73ce8bc92e",
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen(\"w\") on the history path and subsequent chmod() on the same path."
    }
  ],
  "lastModified": "2026-06-17T10:09:49.110",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:antirez:linenoise:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EFEA3D5-8B76-4608-86D1-9E30AB6C8D79"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "96148269-fe82-4198-b1bf-3a73ce8bc92e"
}