GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb utilities/pspp-convert.c parse_variables_option Local Privilege Escalation

Gaskiya vulnerability da aka ware a matsayin kura an samu a GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Hakika, aikin parse_variables_option ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil utilities/pspp-convert.c, a cikin sashen $software_component. A sa manipulation ka Local Privilege Escalation. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-590. Hakika, rauni an bayyana shi 06/09/2025 kamar 67072. An raba bayanin tsaro don saukewa a savannah.gnu.org. Wannan matsala ana saninta da CVE-2025-5899. Wuroo ka a yiɗi a yi ɗum e laawol gese. Tekinikal faɗi ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga drive.google.com. 0-day shima, an ndiyam a wuro be $0-$5k. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

2 Goyarwa · 57 Datenpunkte

FurɗeSúgá
06/09/2025 09:24
Gargadi 1/1
06/10/2025 01:08
software_vendorGNUGNU
software_namePSPPPSPP
software_version82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
software_fileutilities/pspp-convert.cutilities/pspp-convert.c
software_functionparse_variables_optionparse_variables_option
vulnerability_cweCWE-590CWE-590
vulnerability_risk22
cvss3_vuldb_avLL
cvss3_vuldb_acLL
cvss3_vuldb_prLL
cvss3_vuldb_uiNN
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_ePP
cvss3_vuldb_rcRR
advisory_identifier6707267072
advisory_urlhttps://savannah.gnu.org/bugs/index.php?67072https://savannah.gnu.org/bugs/index.php?67072
exploit_availability11
exploit_publicity11
exploit_urlhttps://drive.google.com/file/d/1YPJLiBzOwVTcc2FzdawYxBJWGujwqy7o/view?usp=sharinghttps://drive.google.com/file/d/1YPJLiBzOwVTcc2FzdawYxBJWGujwqy7o/view?usp=sharing
source_cveCVE-2025-5899CVE-2025-5899
cna_responsibleVulDBVulDB
cvss2_vuldb_avLL
cvss2_vuldb_acLL
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_ePOCPOC
cvss2_vuldb_rcURUR
cvss4_vuldb_avLL
cvss4_vuldb_acLL
cvss4_vuldb_prLL
cvss4_vuldb_uiNN
cvss4_vuldb_vcLL
cvss4_vuldb_viLL
cvss4_vuldb_vaLL
cvss4_vuldb_ePP
cvss2_vuldb_auSS
cvss2_vuldb_rlNDND
cvss3_vuldb_rlXX
cvss4_vuldb_atNN
cvss4_vuldb_scNN
cvss4_vuldb_siNN
cvss4_vuldb_saNN
cvss2_vuldb_basescore4.34.3
cvss2_vuldb_tempscore3.73.7
cvss3_vuldb_basescore5.35.3
cvss3_vuldb_tempscore4.84.8
cvss3_meta_basescore5.35.3
cvss3_meta_tempscore4.84.8
cvss4_vuldb_bscore4.84.8
cvss4_vuldb_btscore1.91.9
advisory_date1749420000 (06/09/2025)1749420000 (06/09/2025)
price_0day$0-$5k$0-$5k
euvd_idEUVD-2025-17586

Do you know our Splunk app?

Download it now for free!