CVE-2025-49809
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on mac...
Original description
The description as published by the source.
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-49809 mtr
- Ubuntu UBUNTU-CVE-2025-49809 mtr
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web github.com