High severity · published Nov 17, 2024
CVE-2024-52867
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g., for setuid and setgid…
8.1
CVSS
0.2%
EPSS
No
On KEV
Description
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g., for setuid and setgid programs) are properly addressed. The vulnerability can be remediated within the product via certain pull, reconfigure, and restart actions. Both 5ab3c4c and 5582241 are needed to resolve the vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
Guix · Gnu
before 5ab3c4c · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-52867
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-52867
git.savannah.gnu.org
https://git.savannah.gnu.org/cgit/guix.git/commit/?id=558224140dab669cabdaebabff18504a066c48d4
git.savannah.gnu.org
https://git.savannah.gnu.org/cgit/guix.git/commit/?id=5ab3c4c1e43ebb637551223791db0ea3519986e1
guix.gnu.org
https://guix.gnu.org/en/blog/2024/build-user-takeover-vulnerability/
lists.debian.org
https://lists.debian.org/debian-lts-announce/2024/11/msg00016.html
More from Guix
7.8
CVE-2019-18192
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to…
5.7
CVE-2025-59378
In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the…
5.5
CVE-2021-27851
A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’