CVE-2025-65807

NameCVE-2025-65807
DescriptionAn issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
rust-sd (PTS)bookworm0.7.6-1+deb12u1vulnerable
trixie1.0.0-3vulnerable
forky, sid1.0.0-4vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
rust-sdsource(unstable)(unfixed)

Notes

https://gist.github.com/faabbi/827f10e144fdd342e13a3dd838902e83
check details and impact/severity

Search for package or bug name: Reporting problems