PT-2025-50315 · Usbmuxd+3 · Usbmuxd+3

Wolfgang Frisch · Publicado 2025-12-10 · Atualizado 2026-03-15 · CVE-2025-66004

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions usbmuxd versions prior to 3ded00c9985a5108cfc7591a309f9a23d57a8cba

Description A Path Traversal vulnerability exists in usbmuxd, potentially allowing local users to gain elevated privileges to the service user level. The issue is due to insufficient sanitization of file paths.

Recommendations Update usbmuxd to version 3ded00c9985a5108cfc7591a309f9a23d57a8cba or later.

Correção

LPE

Enumeração de Fraquezas

CWE-35

Identificadores relacionados

AZL-72280

AZL-72290

CVE-2025-66004

DLA-4417-1

MGASA-2026-0039

OESA-2026-1556

SUSE-SU-2025:4435-1

SUSE-SU-2026:0042-1

USN-7929-1

Produtos afetados

Debian

Linuxmint

Ubuntu

Usbmuxd

Referências · 30

• https://osv.dev/vulnerability/SUSE-SU-2026:0042-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2025/suse-su-20254435-1 · Nota
• https://lists.debian.org/debian-security-announce/2026/msg00034.html · Nota
• https://osv.dev/vulnerability/OESA-2026-1556 · Aviso do Fabricante
• https://t.me/cveNotify/146478 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-66004 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66004 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2025-66004 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1556 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20260042-1 · Nota
• https://cve.org/CVERecord?id=CVE-2025-66004 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-66004 · Nota
• https://twitter.com/Cezar_H_Linux/status/2003044001293946979 · Publicação no Twitter
• https://osv.dev/vulnerability/AZL-72290 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=35118 · Nota