Deepin lastore-daemon Privilege Escalation via Unsigned .deb Installation

Advisories

severity: high
date: July 22, 2025
Affecting: lastore-daemon 0.9.53-1 (Deepin 15.5)
lastore-daemon 0.9.66-1 (Deepin 15.7)
CVE: CVE-2016-15045
CVE type: Missing Authentication
CVSS: 8.5
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: Metasploit Module
EDB-39433
EDB-44523
lastore-daemon Repo
Deepin Releases
Credit: King's Way