Every CVE Search/ Get API key

CVE-2025-1390

pam_cap: Fix potential configuration parsing error

6.1 MediumFix available

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
None

Exploit likelihood

0.18%Up 0.1 points since Feb 18, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.1

pam_cap: Fix potential configuration parsing error

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
CVE-2025-1390
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weakness
CWE-284
Updated
2026-11-02
EUVDEUVD-2025-4857 6.1

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
EUVD-2025-4857
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-cq92-4vj3-mcq8 6.1

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during...

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
GHSA-cq92-4vj3-mcq8
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weakness
CWE-284
Updated
2026-11-02
NVD 6.1

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
CVE-2025-1390
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weakness
CWE-284
Updated
2026-11-02
OSVBELL-CVE-2025-1390 6.1
Record
BELL-CVE-2025-1390
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2025-1390 6.1

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
DEBIAN-CVE-2025-1390
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVOESA-2025-1243 6.1

libcap security update

This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.(CVE-2025-1390)

Record
OESA-2025-1243
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-1390 6.1

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
UBUNTU-CVE-2025-1390
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
OSVAZL-56916 No score

CVE-2025-1390 affecting package libcap for versions less than 2.60-3

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
AZL-56916
Updated
2026-11-02
OSVAZL-57034 No score

CVE-2025-1390 affecting package libcap for versions less than 2.69-2

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
AZL-57034
Updated
2026-11-05
OSV No score

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

Record
CVE-2025-1390
Updated
2026-11-02
OSVMGASA-2025-0082 No score

Updated libcap packages fix security vulnerability

pam_cap: Fix potential configuration parsing error. (CVE-2025-1390)

Record
MGASA-2025-0082
Updated
2026-11-02
OSVUSN-7287-1 No score

libcap2 vulnerability

Tianjia Zhang discovered the libcap2 PAM module pam_cap incorrectly handled parsing group names in the configuration file. This could result in certain users being granted capabilities, contrary to expectations.

Record
USN-7287-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libcap
Azure Linux:2
 before 2.60-3
2.60-3
libcap
Azure Linux:3
 before 2.69-2
2.69-2
libcap
Alpaquita:23
 2.66-r0 and later None known
libcap
Alpaquita:stream
 2.66-r0 up to 2.76-r0
2.76-r0
libcap2
Debian:12
 before 1:2.66-4+deb12u1, plus listed versions
1:2.66-4
1:2.66-4+deb12u1
libcap2
Debian:13
 before 1:2.73-4
1:2.73-4
libcap2
Debian:14
 before 1:2.73-4
1:2.73-4
libcap2
Debian:11
From an advisory covering 3 CVEs
 before 1:2.44-1+deb11u1, plus listed versions
1:2.44-1
1:2.44-1+deb11u1
libcap
Mageia:9
 before 2.52-5.1.mga9
2.52-5.1.mga9
libcap
openEuler:24.03-LTS
 before 2.69-4.oe2403sp1
2.69-4.oe2403sp1
Show 10 moreShow less
Affected packages
PackageAffectedFixed
libcap
openEuler:24.03-LTS-SP1
 before 2.69-4.oe2403sp1
2.69-4.oe2403sp1
libcap
openEuler:20.03-LTS-SP4
 before 2.32-8.oe2003sp4
2.32-8.oe2003sp4
libcap
openEuler:22.03-LTS-SP3
 before 2.61-8.oe2203sp3
2.61-8.oe2203sp3
libcap
openEuler:22.03-LTS-SP4
 before 2.61-8.oe2203sp4
2.61-8.oe2203sp4
libcap2
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:2.22-1.2ubuntu21:2.24-0ubuntu11:2.24-0ubuntu21:2.24-0ubuntu2+esm11:2.24-0ubuntu2+esm2
 None known
libcap2
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:2.24-91:2.24-121:2.24-12ubuntu0.1~esm11:2.24-12ubuntu0.1~esm2
 None known
libcap2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:2.25-1.11:2.25-1.21:2.25-1.2ubuntu0.1~esm11:2.25-1.2ubuntu0.1~esm2
 None known
libcap2
Ubuntu:20.04:LTS
 before 1:2.32-1ubuntu0.2, plus listed versions
1:2.25-21:2.27-11:2.32-11:2.32-1ubuntu0.1
1:2.32-1ubuntu0.2
libcap2
Ubuntu:22.04:LTS
 before 1:2.44-1ubuntu0.22.04.2, plus listed versions
1:2.44-1build11:2.44-1build21:2.44-1build31:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2
libcap2
Ubuntu:24.04:LTS
 before 1:2.66-5ubuntu2.2, plus listed versions
1:2.66-4ubuntu11:2.66-5ubuntu11:2.66-5ubuntu21:2.66-5ubuntu2.1
1:2.66-5ubuntu2.2

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-1390 is a medium vulnerability (CVSS 6.1) in Openanolis Anolis Os, published February 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in libcap 2.60-3.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open