PT-2025-4860 · Deepin · Dde-Api-Proxy

Matthias Gerstner · Published 2024-08-29 · Updated 2025-02-02 · CVE-2025-23222

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deepin dde-api-proxy versions 1.0.0 through 1.0.19

Description The issue allows unprivileged users to access D-Bus services as root because dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus services. The actual D-Bus services are unaware of the proxy situation and believe that root is requesting actions. As a result, several proxied methods that should not be accessible to non-root users are accessible to them. In situations involving Polkit, the caller is treated as an admin, resulting in a similar escalation of privileges.

Recommendations Deepin dde-api-proxy versions 1.0.0 through 1.0.19: Update to a version that includes the bugfix for the authentication bypass issue, noting that the initial bugfix release may be incomplete and further updates might be necessary.

Fix

LPE

Weakness Enumeration

CWE-940

Related Identifiers

BDU:2025-05410

CVE-2025-23222

Affected Products

Dde-Api-Proxy

References · 17

• https://bdu.fstec.ru/vul/2025-05410 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23222 · Security Note
• https://github.com/linuxdeepin/dde-api-proxy · Note
• https://twitter.com/Dinosn/status/1884916272573391068 · Twitter Post
• https://twitter.com/fridaysecurity/status/1884433553888256487 · Twitter Post
• https://openwall.com/lists/oss-security/2025/01/24/3 · Note
• https://t.me/pentestingnews/55799 · Telegram Post
• https://twitter.com/oss_security/status/1882825574147883372 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1882886541980090576 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1884435636956119230 · Twitter Post
• https://twitter.com/ksg93rd/status/1886140530230259734 · Twitter Post
• https://security.opensuse.org/2025/01/24/dde-api-proxy-privilege-escalation.html · Note
• https://bugzilla.suse.com/show_bug.cgi?id=1229918 · Note
• https://twitter.com/CVEnew/status/1882838871290806661 · Twitter Post
• https://t.me/cvedetector/16311 · Telegram Post