Lucene search

Privilege Escalation

🗓️ 29 Aug 2022 04:38:37Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

Privilege Escalation in librpm.so due to symlink validations

Reporter	Title	Published	Views	Family All 199
AlpineLinux	CVE-2021-35939	26 Aug 202216:15	–	alpinelinux
AlpineLinux	CVE-2021-35937	25 Aug 202220:15	–	alpinelinux
UbuntuCve	CVE-2021-35939	26 Aug 202200:00	–	ubuntucve
UbuntuCve	CVE-2021-35937	25 Aug 202200:00	–	ubuntucve
UbuntuCve	CVE-2017-7500	13 Aug 201800:00	–	ubuntucve
UbuntuCve	CVE-2017-7501	22 Nov 201700:00	–	ubuntucve
Cvelist	CVE-2021-35939	26 Aug 202200:00	–	cvelist
Cvelist	CVE-2021-35937	25 Aug 202200:00	–	cvelist
Cvelist	CVE-2017-7501	22 Nov 201722:00	–	cvelist
Cvelist	CVE-2017-7500	13 Aug 201817:00	–	cvelist

Vulners

Node

-rpm\Matchedge4.16.1.3-r2

-rpm\Matchedge4.15.1-r2

-rpm\Matchedge4.16.1.2-r0

-rpm\Matchedge4.16.1.3-r1

-rpm\Matchedge4.16.1.3-r3

-rpm\Matchedge4.15.1-r1

-rpm\Matchedge4.16.1.3-r0

-rpm\Matchedge4.17.1-r0

-rpm\Matchedge4.16.1.3-r2

-rpm\Matchedge4.15.1-r2

-rpm\Matchedge4.16.1.2-r0

-rpm\Matchedge4.16.1.3-r1

-rpm\Matchedge4.16.1.3-r3

-rpm\Matchedge4.15.1-r1

-rpm\Matchedge4.16.1.3-r0

-rpm\Matchedge4.17.1-r0

-rpm\Matchbookworm4.16.1.2+dfsg1-3

-rpm\Matchsid4.14.2.1+dfsg1-1.1+b2

-librpm.soRange≤9.3.0

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/rpm-software-management/rpm/pull/1919
github	www.github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556
rpm	www.rpm.org/wiki/Releases/4.18.0
security	www.security.gentoo.org/glsa/202210-22
access	www.access.redhat.com/security/cve/CVE-2021-35939

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Aug 2022 04:37Current

7.1High risk

Vulners AI Score7.1

EPSS0.001