Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36825
HistoryAug 29, 2022 - 4:37 a.m.

Privilege Escalation

2022-08-2904:37:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
30
vulnerability
privilege escalation
symlink
sanitizations
root privileges
cve-2017-7500
cve-2017-7501

EPSS

0.001

Percentile

32.1%

JSON

librpm.so is vulnerable to privilege escalation. A local unauthenticated user who owns another ancestor directory is able to potentially gain root privileges of the system due to the lack of sanitizations in lib/fsm.c during symlink validations. This vulnerability exists due to incomplete fixes for CVE-2017-7500 and CVE-2017-7501.

Related

debiancve 4
prion 4
redhatcve 4
nvd 4
osv 9
nessus 53
alpinelinux 2
ubuntucve 4
cvelist 4
cve 4
fedora 2
mageia 1
openvas 24
suse 2
ibm 9
veracode 1
f5 1
cbl_mariner 2
rosalinux 1
gentoo 2
rocky 1
almalinux 2
freebsd 1
redhat 40
oraclelinux 2
redos 1
photon 6
debiancve
debiancve
CVE-2021-35939
2022-08-26 16:15:08
CVE-2021-35937
2022-08-25 20:15:09
CVE-2017-7500
2018-08-13 17:29:00
prion
prion
Design/Logic Flaw
2022-08-26 16:15:00
Race condition
2022-08-25 20:15:00
Privilege escalation
2017-11-22 22:29:00
redhatcve
redhatcve
CVE-2021-35939
2021-07-01 17:51:18
CVE-2021-35937
2021-07-01 17:22:58
CVE-2017-7501
2017-07-03 15:19:09
nvd
nvd
CVE-2021-35939
2022-08-26 16:15:08
CVE-2021-35937
2022-08-25 20:15:09
CVE-2017-7501
2017-11-22 22:29:00
osv
osv
CVE-2021-35939
2022-08-26 16:15:08
CVE-2021-35937
2022-08-25 20:15:09
CVE-2017-7500
2018-08-13 17:29:00
nessus
nessus
CBL Mariner 2.0 Security Update: rpm (CVE-2021-35939)
2023-03-28 00:00:00
Fedora 26 : rpm (2017-9232eac8e8)
2017-11-08 00:00:00
SUSE SLED12 / SLES12 Security Update : rpm (SUSE-SU-2018:3884-1)
2018-11-26 00:00:00
alpinelinux
alpinelinux
CVE-2021-35939
2022-08-26 16:15:08
CVE-2021-35937
2022-08-25 20:15:09
ubuntucve
ubuntucve
CVE-2021-35939
2022-08-26 00:00:00
CVE-2021-35937
2022-08-25 00:00:00
CVE-2017-7500
2018-08-13 00:00:00
cvelist
cvelist
CVE-2021-35939
2022-08-26 00:00:00
CVE-2021-35937
2022-08-25 00:00:00
CVE-2017-7501
2017-11-22 22:00:00
cve
cve
CVE-2021-35939
2022-08-26 16:15:08
CVE-2021-35937
2022-08-25 20:15:09
CVE-2017-7500
2018-08-13 17:29:00
fedora
fedora
[SECURITY] Fedora 26 Update: rpm-4.13.0.2-1.fc26
2017-11-07 22:21:47
[SECURITY] Fedora 25 Update: rpm-4.13.0.2-1.fc25
2017-11-28 17:35:50
mageia
mageia
Updated rpm package fixes security vulnerabilities
2017-10-30 22:23:17
openvas
openvas
openSUSE: Security Advisory for rpm (openSUSE-SU-2018:3373-1)
2018-10-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3286-1)
2021-04-19 00:00:00
Fedora Update for rpm FEDORA-2017-ab57a100f3
2017-12-04 00:00:00
suse
suse
Security update for rpm (moderate)
2018-10-24 15:11:26
Security update for rpm (moderate)
2018-08-06 15:17:09
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Improper Link Resolution Before File Access or Time-of-check Time-of-use Race Condition in the RHEL UBI (CVE-2021-35937)
2024-08-05 21:36:26
Security Bulletin: IBM Storage Ceph is vulnerable to an Improper Link Resolution Before File Access ('Link Following') in the RHEL UBI (CVE-2021-35939)
2024-08-05 20:08:39
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-03-07 14:53:54
veracode
veracode
Denial Of Service (DoS)
2022-10-01 00:52:29
f5
f5
K03710547 : Linux RPM vulnerability CVE-2017-7501
2018-01-26 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-35939 affecting package rpm 4.14.2-15
2024-09-30 03:52:37
CVE-2021-35939 affecting package rpm for versions less than 4.18.0-1
2022-10-05 23:33:44
rosalinux
rosalinux
Advisory ROSA-SA-2021-1963
2021-07-02 18:04:36
gentoo
gentoo
RPM: Multiple vulnerabilities
2018-11-28 00:00:00
RPM: Multiple Vulnerabilities
2022-10-31 00:00:00
rocky
rocky
rpm security update
2024-02-12 20:17:16
almalinux
almalinux
Moderate: rpm security update
2024-01-25 00:00:00
Moderate: rpm security update
2024-02-01 00:00:00
freebsd
freebsd
rpm4 -- Multiple Vulnerabilities
2022-08-22 00:00:00
redhat
redhat
(RHSA-2024:0582) Moderate: rpm security update
2024-01-30 12:53:23
(RHSA-2024:0424) Moderate: rpm security update
2024-01-24 14:40:29
(RHSA-2024:0463) Moderate: rpm security update
2024-01-24 14:41:02
oraclelinux
oraclelinux
rpm security update
2024-01-25 00:00:00
rpm security update
2024-02-02 00:00:00
redos
redos
ROS-20240410-21
2024-04-10 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0194
2018-11-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0108
2018-11-08 00:00:00
Critical Photon OS Security Update - PHSA-2018-0194
2018-11-07 00:00:00

EPSS

0.001

Percentile

32.1%

JSON
Related for VERACODE:36825
debiancve4prion4redhatcve4nvd4osv9nessus53alpinelinux2ubuntucve4cvelist4cve4fedora2mageia1openvas24suse2ibm9veracode1f51cbl_mariner2rosalinux1gentoo2rocky1almalinux2freebsd1redhat40oraclelinux2redos1photon6