A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

Vendors Products
Suse
  • Opensuse Tumbleweed

No data.

No data.

References
Link Providers
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53882 cve-icon cve-icon
History

Wed, 03 Sep 2025 08:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-273

Wed, 03 Sep 2025 07:30:00 +0000

Type Values Removed Values Added
Description A Improper Check for Dropped Privileges vulnerability in the logrotate setup of openSUSE Tumbleweed mailman3 allows the mailman user to create files as root, allowing for a potential privilege escalation. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1. A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Title python-mailman logrotate configuration allows potential escalation from mailman to root The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess
Weaknesses CWE-807

Thu, 31 Jul 2025 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-807

Thu, 31 Jul 2025 11:45:00 +0000

Type Values Removed Values Added
Description A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to root. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1. A Improper Check for Dropped Privileges vulnerability in the logrotate setup of openSUSE Tumbleweed mailman3 allows the mailman user to create files as root, allowing for a potential privilege escalation. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Title python-mailmans logrotate configuration allows potential escalation from mailman to root python-mailman logrotate configuration allows potential escalation from mailman to root
Weaknesses CWE-273
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

 cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N'}

cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'}

Thu, 24 Jul 2025 07:00:00 +0000

Type Values Removed Values Added
Description A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1. A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to root. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

Wed, 23 Jul 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 23 Jul 2025 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Suse
Suse opensuse Tumbleweed
Vendors & Products Suse
Suse opensuse Tumbleweed

Wed, 23 Jul 2025 09:45:00 +0000

Type Values Removed Values Added
Description A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Title python-mailmans logrotate configuration allows potential escalation from mailman to root
Weaknesses CWE-807
References
cve-icon MITRE

Status: PUBLISHED

Assigner: suse

Published: 2025-07-23T09:31:18.547Z

Updated: 2025-09-03T07:23:06.351Z

Reserved: 2025-07-11T10:53:52.681Z

Link: CVE-2025-53882

cve-icon Vulnrichment

Updated: 2025-07-23T18:31:45.853Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-23T10:15:24.650

Modified: 2025-09-03T08:15:31.683

Link: CVE-2025-53882

cve-icon Redhat

No data.