Home

Description

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

PUBLISHED Reserved 2025-04-30 | Published 2025-05-26 | Updated 2025-05-27 | Assigner suse




MEDIUM: 6.0CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

MEDIUM: 5.3CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Product status

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Default status
unaffected

? (custom) before 4.6.2-150000.5.8.1
affected

Credits

Matthias Gerstner, SUSE finder

References

www.openwall.com/lists/oss-security/2025/05/12/1 exploit

bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46802

www.openwall.com/lists/oss-security/2025/05/12/1

cve.org (CVE-2025-46802)

nvd.nist.gov (CVE-2025-46802)

Download JSON