CVE-2021-44038

2021-11-1900:00:00

ubuntu.com

quagga vulnerability

privilege escalation

chown

chmod

package installation

security bug

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod
operations in the suggested spec file allow users (with control of the
non-root-owned directory /etc/quagga) to escalate their privileges to root
upon package installation or update.

Bugs

<https://bugzilla.suse.com/show_bug.cgi?id=1191890>

Notes

Author	Note
sbeattie	the debian packaging installs the vulnerable systemd unit files
mdeslaur	it looks like the upstream quagga project repo is dead since the project got forked as frr. The systemd unit files are in the redhat directory. no upstream fix as of 2022-01-05

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchquagga< anyUNKNOWN
ubuntu20.04noarchquagga< anyUNKNOWN
ubuntu16.04noarchquagga< anyUNKNOWN