CVE-2025-14282
Dropbear: privilege escalation via unix domain socket forwardings
概要
Dropbear: privilege escalation via unix domain socket forwardings
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root,
only switching to the logged-in user upon spawning a shell or performing
some operations like reading the user's files.
With the recent ability of also using unix domain sockets as the forwarding destination any user able to log in via ssh can connect to any unix socket with the root's credentials, bypassing both file system restrictions and any SO_PEERCRED / SO_PASSCRED checks performed by the peer.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2025-14282 dropbear 修正版: 2025.89-r0
- Debian DEBIAN-CVE-2025-14282 dropbear 修正版: 2025.89-1~deb13u1
- Ubuntu UBUNTU-CVE-2025-14282 dropbear
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report bugzilla.redhat.com
- web openwall.com
- web openwall.com
- web github.com
- web lists.ucc.gu.uwa.edu.au