CVE-2011-2910 Privilege escalation in ax25-tools
The AX.25 daemon fails to verify privilege dropping, allowing attackers to retain root privileges and escalate access on affected Linux systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2910?
CVE-2011-2910 is a medium-severity vulnerability in Debian Debian Linux, published on 15 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.
Weakness: CWE-269
Which versions are affected by CVE-2011-2910?
It affects 2 products.
Products include Debian Debian Linux, Linux-Ax25 Ax25-Tools.
How do I fix CVE-2011-2910?
Upgrade to a fixed version.
Is CVE-2011-2910 being exploited?
There is no known exploitation of CVE-2011-2910 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2011-2910, GHSA-mrq3-m48q-67j2.