CVE-2021-36983

2021-07-3014:15:18

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.

CPENameOperatorVersion
replaysorceryeq0.2.2
replaysorceryeq0.2.1
replaysorceryeq0.3.0
replaysorceryeq0.2.6
replaysorceryeq0.2.7
replaysorceryeq0.2.3
replaysorceryeq0.2.4
replaysorceryeq0.5.0
replaysorceryeq0.2.5
replaysorceryeq0.3.1

Name	Operator	Version
replaysorcery	eq	0.2.2
replaysorcery	eq	0.2.1
replaysorcery	eq	0.3.0
replaysorcery	eq	0.2.6
replaysorcery	eq	0.2.7
replaysorcery	eq	0.2.3
replaysorcery	eq	0.2.4
replaysorcery	eq	0.5.0
replaysorcery	eq	0.2.5
replaysorcery	eq	0.3.1