CVE catalog

CVE-2017-9525

cron: CVE-2017-9525

Severity: Medium
Published: Jun 9, 2017, 4:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.55% · Oct 25, 2026

In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	cron	sid	`3.0pl1-212`	fixed
Debian	cron	forky	`3.0pl1-212`	fixed
Debian	cron	trixie	`3.0pl1-197`	fixed
Debian	cron	bookworm	`3.0pl1-162`	fixed
Debian	systemd-cron	sid	`2.8.2-1`	fixed
Debian	systemd-cron	forky	`2.8.2-1`	fixed
Debian	systemd-cron	trixie	`2.5.1-2`	fixed
Debian	systemd-cron	bookworm	`1.15.19-5`	fixed
Ubuntu	cron	pro	`3.0pl1-127ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2+esm1`	fixed
Ubuntu	cron	pro	`3.0pl1-127ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2+esm1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2+esm2`	fixed
Ubuntu	cron	18.04	`3.0pl1-128ubuntu5`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1.1`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1.2`	fixed
Ubuntu	cron	18.04	`3.0pl1-128ubuntu5`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1.1`	fixed
Ubuntu	cron	14.04	`3.0pl1-124ubuntu2`	vulnerable
Ubuntu	cron	pro	`3.0pl1-127ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2+esm1`	vulnerable
Ubuntu	cron	pro	`3.0pl1-128ubuntu2+esm2`	fixed
Ubuntu	cron	18.04	`3.0pl1-128ubuntu5`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1.1`	vulnerable
Ubuntu	cron	18.04	`3.0pl1-128.1ubuntu1.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	cron	source	sid	`3.0pl1-129`	not yet assigned	Not reported	[864466]
Debian	cron	source	forky	`3.0pl1-129`	not yet assigned	Not reported	[864466]
Debian	cron	source	trixie	`3.0pl1-129`	not yet assigned	Not reported	[864466]
Debian	cron	source	bookworm	`3.0pl1-129`	not yet assigned	Not reported	[864466]
Debian	systemd-cron	source	sid	`1.5.17-2`	not yet assigned	Not reported	[993731]
Debian	systemd-cron	source	forky	`1.5.17-2`	not yet assigned	Not reported	[993731]
Debian	systemd-cron	source	trixie	`1.5.17-2`	not yet assigned	Not reported	[993731]
Debian	systemd-cron	source	bookworm	`1.5.17-2`	not yet assigned	Not reported	[993731]
Ubuntu	cron	deb	pro	`3.0pl1-128ubuntu2+esm1`	Not reported	USN-5259-1	Not reported
Ubuntu	cron	deb	pro	`3.0pl1-128ubuntu2+esm2`	Not reported	USN-5259-3	Not reported
Ubuntu	cron	deb	18.04	`3.0pl1-128.1ubuntu1.2`	Not reported	USN-5259-3	Not reported
Ubuntu	cron	deb	18.04	`3.0pl1-128.1ubuntu1.1`	Not reported	USN-5259-2	Not reported
Ubuntu	cron	deb	pro	`3.0pl1-128ubuntu2+esm2`	Not reported	UBUNTU-CVE-2017-9525	Not reported
Ubuntu	cron	deb	18.04	`3.0pl1-128.1ubuntu1.2`	Not reported	UBUNTU-CVE-2017-9525	Not reported

[Debian bug #864466][Debian bug #993731]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[cron]Fixed
Details (2)
- 3.0pl1-162 · amd64 · bookworm
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · bookworm; dsa · cron · debian · 12
- 3.0pl1-162 · arm64 · bookworm
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · bookworm; dsa · cron · debian · 12
[cron-daemon-common]Fixed
Source package: [cron]
Details (2)
- 3.0pl1-162 · all · bookworm
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · bookworm; dsa · cron · debian · 12
- 3.0pl1-162 · all · bookworm
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · bookworm; dsa · cron · debian · 12
[systemd-cron]Fixed
Details (4)
- 1.15.19-5 · amd64 · bookworm
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · bookworm; dsa · systemd-cron · debian · 12
- 1.15.19-5 · arm64 · bookworm
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · bookworm; dsa · systemd-cron · debian · 12
- 2.3.0-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · bookworm; dsa · systemd-cron · debian · 12
- 2.3.0-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · bookworm; dsa · systemd-cron · debian · 12

[Debian 13 (Trixie)]

[cron]Fixed
Details (2)
- 3.0pl1-197 · amd64 · trixie
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · 13
- 3.0pl1-197 · arm64 · trixie
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · 13
[cron-daemon-common]Fixed
Source package: [cron]
Details (2)
- 3.0pl1-197 · all · trixie
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · 13
- 3.0pl1-197 · all · trixie
  Fixed · Fixed: 3.0pl1-129
  dsa · cron · debian · 13
[systemd-cron]Fixed
Details (2)
- 2.5.1-2 · amd64 · trixie
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · 13
- 2.5.1-2 · arm64 · trixie
  Fixed · Fixed: 1.5.17-2
  dsa · systemd-cron · debian · 13

Observed: Oct 23, 2026, 5:31:59 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]