It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

🗓️ 03 Sep 2022 07:00:00Reported by MicrosoftType

Incomplete fix for CVE-2017-7500/7501; only parent directory checked, enabling a local user with an ancestor to gain root privileges and threaten confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 217
FreeBSD	rpm4 -- Multiple Vulnerabilities	22 Aug 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to an Improper Link Resolution Before File Access ('Link Following') in the RHEL UBI (CVE-2021-35939)	5 Aug 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Aug 202514:19	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	7 Mar 202414:53	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-rpm, rpm, rpm-apidocs (ALAS2023-2024-573)	21 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0030: rpm (ALINUX3-SA-2024:0030)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : rpm (ALSA-2024:0463)	26 Jan 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : rpm (ALSA-2024:0647)	2 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 8 : rpm (CESA-2024:0647)	1 Feb 202400:00	–	nessus