VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Nov 15, 2019· Updated Jun 16, 2026

CVE-2011-2910

CVE-2011-2910

Description

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Linux Ax25/Ax25 Tools
    cpe:2.3:a:linux-ax25:ax25-tools:*:*:*:*:*:*:*:*
    Range: <0.0.8-13
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • Ax25 Tools/Ax25 Toolsllm-fuzzy2 versions
    <0.0.8-13+ 1 more
    • (no CPE)range: <0.0.8-13
    • (no CPE)range: before 0.0.8-13

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.