目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2025-6020— Linux-pam 安全漏洞

CVSS 7.8 · High EPSS 0.40% · P33

影响版本矩阵 61

厂商产品版本范围状态
NoneNone< 1.7.1affected
Red Hatcert-manager operator for Red Hat OpenShift 1.16v1.16.5-1760515757< *unaffected
Red HatCompliance Operator 11.8.0< *unaffected
Red HatRed Hat Discovery 22.0.0-1752592913< *unaffected
2.2.1-1758555934< *unaffected
Red HatRed Hat Enterprise Linux 100:1.6.1-8.el10< *unaffected
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:1.6.1-8.el10_0< *unaffected
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:1.1.8-23.el7_9.1< *unaffected
Red HatRed Hat Enterprise Linux 80:1.3.1-37.el8_10< *unaffected
0:1.3.1-38.el8_10< *unaffected
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support0:1.3.1-8.el8_2.1< *unaffected
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:1.3.1-14.el8_4.1< *unaffected
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:1.3.1-16.el8_6.2< *unaffected
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service0:1.3.1-16.el8_6.2< *unaffected
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions0:1.3.1-16.el8_6.2< *unaffected
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:1.3.1-26.el8_8.1< *unaffected
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:1.3.1-26.el8_8.1< *unaffected
Red HatRed Hat Enterprise Linux 90:1.5.1-26.el9_6< *unaffected
0:1.5.1-25.el9_6< *unaffected
0:1.5.1-26.el9_6< *unaffected
0:1.5.1-25.el9_6< *unaffected
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions0:1.5.1-9.el9_0.2< *unaffected
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:1.5.1-15.el9_2.1< *unaffected
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support0:1.5.1-24.el9_4< *unaffected
Red HatRed Hat Insights proxy 1.51.5.7-1759331989< *unaffected
Red HatRed Hat OpenShift distributed tracing 3.6.1rhosdt-3.6-1752046452< *unaffected
rhosdt-3.6-1752046437< *unaffected
rhosdt-3.6-1752046439< *unaffected
rhosdt-3.6-1752070865< *unaffected
rhosdt-3.6-1752070873< *unaffected
rhosdt-3.6-1751993590< *unaffected
rhosdt-3.6-1752070827< *unaffected
rhosdt-3.6-1752070833< *unaffected
… +1 条更多
Red HatRed Hat OpenShift sandboxed containers 1.11.10.2-1757422110< *unaffected
1.10.2-1757421804< *unaffected
1.10.2-1757421879< *unaffected
1.10.2-1757422401< *unaffected
Red HatRed Hat Web Terminal 1.11 on RHEL 91.11-19< *unaffected
1.11-8< *unaffected
Red HatRed Hat Web Terminal 1.12 on RHEL 91.12-4< *unaffected
Red HatRHEL-8 based Middleware Containers7.13.5-4.1752066672< *unaffected
7.13.5-4.1752065732< *unaffected
7.13.5-4.1752065732< *unaffected
7.13.5-3.1752065737< *unaffected
7.13.5-4.1752065731< *unaffected
7.13.5-25< *unaffected
7.13.5-4.1752065736< *unaffected
7.13.5-2.1752065733< *unaffected
… +1 条更多
Red HatRHOSS-1.36-RHEL-81.36.0-11< *unaffected
1.36.0-11< *unaffected
1.36.0-11< *unaffected
1.36.0-10< *unaffected
1.36.0-10< *unaffected
1.36.0-4< *unaffected
1.36.0-9< *unaffected
1.36.0-12< *unaffected
… +3 条更多

一、 漏洞 CVE-2025-6020 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Linux-pam: linux-pam directory traversal
来源: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
来源: CVE Program / CVE List V5
Vulnerability Title
Linux-pam 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux-pam是Linux团队的一款用于Linux的支持插拔式的系统身份验证软件。 Linux-pam存在安全漏洞，该漏洞源于pam_namespace模块使用用户控制路径时保护不足，可能导致本地用户通过符号链接攻击和竞争条件提升至root权限。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
-- 0 ~ 1.7.1 -
Red HatRed Hat Enterprise Linux 10 0:1.6.1-8.el10 ~ * cpe:/o:redhat:enterprise_linux:10.1
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support 0:1.6.1-8.el10_0 ~ * cpe:/o:redhat:enterprise_linux_eus:10.0
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support 0:1.1.8-23.el7_9.1 ~ * cpe:/o:redhat:rhel_els:7
Red HatRed Hat Enterprise Linux 8 0:1.3.1-37.el8_10 ~ * cpe:/o:redhat:enterprise_linux:8::baseos
Red HatRed Hat Enterprise Linux 8 0:1.3.1-38.el8_10 ~ * cpe:/o:redhat:enterprise_linux:8::baseos
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support 0:1.3.1-8.el8_2.1 ~ * cpe:/o:redhat:rhel_aus:8.2::baseos
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:1.3.1-14.el8_4.1 ~ * cpe:/o:redhat:rhel_aus:8.4::baseos
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:1.3.1-16.el8_6.2 ~ * cpe:/o:redhat:rhel_aus:8.6::baseos
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service 0:1.3.1-16.el8_6.2 ~ * cpe:/o:redhat:rhel_aus:8.6::baseos
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions 0:1.3.1-16.el8_6.2 ~ * cpe:/o:redhat:rhel_aus:8.6::baseos
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service 0:1.3.1-26.el8_8.1 ~ * cpe:/o:redhat:rhel_e4s:8.8::baseos
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:1.3.1-26.el8_8.1 ~ * cpe:/o:redhat:rhel_e4s:8.8::baseos
Red HatRed Hat Enterprise Linux 9 0:1.5.1-26.el9_6 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9 0:1.5.1-25.el9_6 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9 0:1.5.1-26.el9_6 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9 0:1.5.1-25.el9_6 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:1.5.1-9.el9_0.2 ~ * cpe:/a:redhat:rhel_e4s:9.0::appstream
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:1.5.1-15.el9_2.1 ~ * cpe:/a:redhat:rhel_e4s:9.2::appstream
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support 0:1.5.1-24.el9_4 ~ * cpe:/a:redhat:rhel_eus:9.4::appstream
Red HatRed Hat Web Terminal 1.11 on RHEL 9 1.11-19 ~ * cpe:/a:redhat:webterminal:1.11::el9
Red HatRed Hat Web Terminal 1.11 on RHEL 9 1.11-8 ~ * cpe:/a:redhat:webterminal:1.11::el9
Red HatRed Hat Web Terminal 1.12 on RHEL 9 1.12-4 ~ * cpe:/a:redhat:webterminal:1.12::el9
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752066672 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752065732 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752065732 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-3.1752065737 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752065731 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-25 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752065736 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-2.1752065733 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHEL-8 based Middleware Containers 7.13.5-4.1752065755 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-11 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-11 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-11 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-10 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-10 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-4 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-9 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-12 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-18 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-11 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red HatRHOSS-1.36-RHEL-8 1.36.0-7 ~ * cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hatcert-manager operator for Red Hat OpenShift 1.16 v1.16.5-1760515757 ~ * cpe:/a:redhat:cert_manager:1.16::el9
Red HatCompliance Operator 1 1.8.0 ~ * cpe:/a:redhat:openshift_compliance_operator:1::el9
Red HatRed Hat Discovery 2 2.0.0-1752592913 ~ * cpe:/a:redhat:discovery:2::el9
Red HatRed Hat Discovery 2 2.2.1-1758555934 ~ * cpe:/a:redhat:discovery:2::el9
Red HatRed Hat Insights proxy 1.5 1.5.7-1759331989 ~ * cpe:/a:redhat:insights_proxy:1.5::el9
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752046452 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752046437 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752046439 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752070865 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752070873 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1751993590 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752070827 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752070833 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift distributed tracing 3.6.1 rhosdt-3.6-1752070866 ~ * cpe:/a:redhat:openshift_distributed_tracing:3.6::el8
Red HatRed Hat OpenShift sandboxed containers 1.1 1.10.2-1757422110 ~ * cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red HatRed Hat OpenShift sandboxed containers 1.1 1.10.2-1757421804 ~ * cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red HatRed Hat OpenShift sandboxed containers 1.1 1.10.2-1757421879 ~ * cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red HatRed Hat OpenShift sandboxed containers 1.1 1.10.2-1757422401 ~ * cpe:/a:redhat:confidential_compute_attestation:1.10::el9

二、漏洞 CVE-2025-6020 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC已实测靶场 高级
Qwen3.6-35B-A3B · 7935 chars
Pro+ 专属包含：
漏洞复现靶场录像（真实沙箱构建 + 触发，独家）
漏洞原理深度分析
触发条件与影响面
完整可执行 POC 代码
利用链与缓解建议
POC 打包下载
每月 100+ 条 AI 生成额度

三、漏洞 CVE-2025-6020 的情报信息

请登录查看更多情报信息。

CVE-2025-6020 厂商安全公告 (14)

IV. Related Vulnerabilities

Same weakness: CWE-22

V. Comments for CVE-2025-6020

暂无评论

发表评论