Lucene search
Veracode Vulnerability DatabaseVERACODE:37369HistoryOct 01, 2022 - 12:52 a.m.
Privilege Escalation
2022-10-0100:52:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
privilege escalation
rpm
vulnerability
remote attacker
credentials
permissions
EPSS
0.001
Percentile
32.1%
rpm is vulnerable to Privilege Escalation. The vulnerability exists because of sets the desired permissions and credentials after installing a files in the system which allows a remote attacker to elevate privileges.
References
access.redhat.com/security/cve/CVE-2021-35938
bugzilla.redhat.com/show_bug.cgi?id=1964114
bugzilla.suse.com/show_bug.cgi?id=1157880
github.com/rpm-software-management/rpm/commit/25a435e90844ea98fe5eb7bef22c1aecf3a9c033
github.com/rpm-software-management/rpm/pull/1919
rpm.org/wiki/Releases/4.18.0
secdb.alpinelinux.org/edge/community.yaml
security.gentoo.org/glsa/202210-22
Related
cvelist
cvelist
CVE-2021-35938
2022-08-25 00:00:00
osv
osv
CVE-2021-35938
2022-08-25 20:15:09
librpmbuild9-4.18.0-1.1 on GA media
2024-06-15 00:00:00
Moderate: rpm security update
2024-02-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-35938 affecting package rpm for versions less than 4.18.0-1
2022-10-05 23:33:44
CVE-2021-35938 affecting package rpm 4.14.2-15
2024-10-01 09:12:07
debiancve
debiancve
CVE-2021-35938
2022-08-25 20:15:09
alpinelinux
alpinelinux
CVE-2021-35938
2022-08-25 20:15:09
ubuntucve
ubuntucve
CVE-2021-35938
2022-08-25 00:00:00
prion
prion
Design/Logic Flaw
2022-08-25 20:15:00
ibm
ibm
redhatcve
redhatcve
CVE-2021-35938
2021-07-01 17:23:07
cve
cve
CVE-2021-35938
2022-08-25 20:15:09
nvd
nvd
CVE-2021-35938
2022-08-25 20:15:09
nessus
nessus
RHEL 8 : rpm (RHSA-2024:0647)
2024-02-01 00:00:00
RHEL 9 : rpm (RHSA-2024:0435)
2024-01-25 00:00:00
Oracle Linux 9 : rpm (ELSA-2024-0463)
2024-01-25 00:00:00
freebsd
freebsd
rpm4 -- Multiple Vulnerabilities
2022-08-22 00:00:00
redhat
redhat
(RHSA-2024:0582) Moderate: rpm security update
2024-01-30 12:53:23
(RHSA-2024:0424) Moderate: rpm security update
2024-01-24 14:40:29
(RHSA-2024:0435) Moderate: rpm security update
2024-01-24 14:40:39
almalinux
almalinux
Moderate: rpm security update
2024-02-01 00:00:00
Moderate: rpm security update
2024-01-25 00:00:00
rocky
rocky
rpm security update
2024-02-12 20:17:16
oraclelinux
oraclelinux
rpm security update
2024-01-25 00:00:00
rpm security update
2024-02-02 00:00:00
gentoo
gentoo
RPM: Multiple Vulnerabilities
2022-10-31 00:00:00
redos
redos
ROS-20240410-21
2024-04-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2023-1174)
2023-01-12 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-2855)
2022-12-22 00:00:00
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-2776)
2022-11-14 00:00:00