CVE-2025-3908 in 3 Linux

요약

\~에 의해 MITRE • 2025. 05. 19.

The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 책임이 있는: OpenVPN
• 예약하다: 2025. 04. 23.
• 공개: 2025. 05. 19.
• 모더레이션: 수락
• 항목: VDB-309559
• CPE: 준비됨
• CWE: CWE-59 (확인됨)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00182
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Education, Industry, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3908
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3908/