PT-2025-26767 · Debian · Debian

Rory Mcnamara · Publicado 2025-01-01 · Atualizado 2025-07-03 · CVE-2025-52992

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Baixa

Vetor base

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined.

Description: General information about the issue is not available.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

BDU:2025-07755

CVE-2025-52992

OPENSUSE-SU-2025:15248-1

Produtos afetados

Debian

Referências · 29

• https://codeberg.org/guix/guix/commit/be8aca065118aa4485c02f991c51bea89034defa · Nota
• https://twitter.com/CVEnew/status/1938671257706471524 · Publicação no Twitter
• https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017 · Nota
• https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde · Nota
• https://discourse.nixos.org/t/pre-disclosure-announcement-security-advisory-for-nix-and-lix-on-june-24-2025/65831 · Nota
• https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5 · Nota
• https://codeberg.org/guix/guix/commit/7173c2c0cad8afc9d8d1ad26f345b5a04f47716a · Nota
• https://security-tracker.debian.org/tracker/CVE-2025-52992 · Aviso do Fabricante
• https://lists.gnu.org/archive/html/guix-devel/2025-06/msg00205.html · Nota
• https://twitter.com/domenkozar/status/1937546408002732385 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2025-46415 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-52992 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-52992 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-52992 · Aviso do Fabricante
• https://labs.snyk.io · Nota