CVE-2021-35939

published 2022-08-26

CVE-2021-35939: It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be…

Priority P4 30 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	rpm	< rpm 4.18.0+dfsg-1 (bookworm)	rpm 4.18.0+dfsg-1 (bookworm)
msrc	cbl2_rpm_4.18.0-1_on_cbl_mariner_2.0	—	—
msrc	cbl_mariner_2.0_arm	—	—
msrc	cbl_mariner_2.0_x64	—	—
msrc	cm1_rpm_4.14.2-15_on_cbl_mariner_1.0	—	—
redhat	enterprise_linux	—	—
rpm	rpm	< 4.18	4.18
rpm	rpm	>= 0 < 4.18.0+dfsg-1	4.18.0+dfsg-1
rpm	rpm	>= 0 < 4.18.0+dfsg-1	4.18.0+dfsg-1
rpm	rpm	>= 0 < 4.18.0+dfsg-1	4.18.0+dfsg-1

CVSS provenance

nvd v3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.3 HIGH

vendor_redhat 7.3 HIGH

vendor_msrc 6.7 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-59