CVE-2025-71263

Published: Mar 13, 2026Modified: Jun 11, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected (1)

Products: Opengroup: Unix

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opengroup Unix	Version 4

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (6)

https://discuss.systems/@ricci/115747843169814700

Source: cve@mitre.org

Issue Tracking

https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/

Source: cve@mitre.org

Press/Media Coverage

https://www.spinellis.gr/blog/20251223/

Source: cve@mitre.org

Technical Description

https://www.tuhs.org/pipermail/tuhs/2026-January/032991.html

Source: cve@mitre.org

Issue TrackingMailing List

http://www.openwall.com/lists/oss-security/2026/03/20/6

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing List

http://www.openwall.com/lists/oss-security/2026/03/21/4

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing List

Timeline

No history available yet.