CVE-2025-23013

🗓️ 15 Jan 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 3621 Views

Local privilege escalation vulnerability in Yubico pam-u2f before version 1.3.1 on macOS/Linux.

Reporter	Title	Published	Views	Family All 60
AlpineLinux	CVE-2025-23013	15 Jan 202500:00	–	alpinelinux
Circl	CVE-2025-23013	15 Jan 202504:14	–	circl
CNNVD	Yubico pam-u2f 安全漏洞	14 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-23013	15 Jan 202500:00	–	cvelist
Debian	[SECURITY] [DLA 4040-1] pam-u2f security update	3 Feb 202508:14	–	debian
Debian	[SECURITY] [DSA 5853-1] pam-u2f security update	29 Jan 202521:32	–	debian
Debian CVE	CVE-2025-23013	15 Jan 202500:00	–	debiancve
Tenable Nessus	Debian dla-4040 : libpam-u2f - security update	4 Feb 202500:00	–	nessus
Tenable Nessus	Debian dsa-5853 : libpam-u2f - security update	29 Jan 202500:00	–	nessus
Tenable Nessus	Fedora 41 : pam-u2f (2025-29900cbe83)	23 Jan 202500:00	–	nessus

Vulners

CNA

Node

yubico pam-u2fRange0–1.3.1

[
  {
    "defaultStatus": "unaffected",
    "product": "pam-u2f",
    "vendor": "Yubico",
    "versions": [
      {
        "lessThan": "1.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
yubico	www.yubico.com/support/security-advisories/ysa-2025-01/
openwall	www.openwall.com/lists/oss-security/2025/01/15/1
openwall	www.openwall.com/lists/oss-security/2025/01/16/5
openwall	www.openwall.com/lists/oss-security/2025/01/16/4
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00001.html
openwall	www.openwall.com/lists/oss-security/2025/01/16/3
openwall	www.openwall.com/lists/oss-security/2025/01/16/2

15 Apr 2026 00:35Current

7.1High risk

Vulners AI Score7.1

CVSS 47.3

EPSS0.00033

SSVC

CWE-394