Qualys TRU Discovers Two Local Information Disclosure Vulnerabilities in Apport and systemd-coredump: CVE-2025-5054 and CVE-2025-4598 | Qualys
Summary: Qualys TRU discovered two race-condition, local information-disclosure vulnerabilities: CVE-2025-5054 in Ubuntu's Apport core-dump handler and CVE-2025-4598 in systemd-coredump, the default handler on RHEL 9, RHEL 10, and Fedora. Qualys developed proofs of concept showing a local attacker exploiting the core dump of a crashed unix_chkpwd process to obtain password hashes from /etc/shadow, with Apport versions up to 2.33.0 affected and every Ubuntu release since 16.04 impacted.
Key Takeaway: A local attacker who can crash unix_chkpwd and read its core dump walks away with password hashes from /etc/shadow, and the affected base spans every Ubuntu release since 16.04 plus RHEL 9, RHEL 10, and Fedora 40/41.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-4598CVE-2025-5054
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026