CVE-2016-15045

Deepin lastore-daemon Privilege Escalation via Unsigned .deb Installation

CVSS 8.5 HIGHEPSS 0.4%CWE-269 CWE-306

Vexday Risk Score

36Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 8.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

02 Feb 2016Metasploit module available

23 Jul 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Linux (developed by Wuhan Deepin Technology Co., Ltd.). In versions 0.9.53-1 (Deepin 15.5) and 0.9.66-1 (Deepin 15.7), the D-Bus configuration permits any user in the sudo group to invoke the InstallPackage method without password authentication. By default, the first user created on Deepin is in the sudo group. An attacker with shell access can craft a .deb package containing a malicious post-install script and use dbus-send to install it via lastore-daemon, resulting in arbitrary code execution as root.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Wuhan Deepin Technology Co., Ltd. · Deepin Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/linuxdeepin/lastore-daemon https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/lastore_daemon_dbus_priv_esc.rb https://www.deepin.org/en/mirrors/releases/https://www.exploit-db.com/exploits/39433 https://www.exploit-db.com/exploits/44523 https://www.vulncheck.com/advisories/deepin-lastore-daemon-priv-esc