Non notée
CVE-2021-35938 A symbolic link issue was found in rpm
Description
A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| rpm | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- bugzilla.suse.com bugzilla.suse.com
- access.redhat.com access.redhat.com
- rpm.org rpm.org
- github.com github.com
- github.com github.com
- GLSA-202210-22 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de rpm
Les 7 CVE de rpm →
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the…
Non notée
CVE-2021-35937
A race condition vulnerability was found in rpm
Non notée
CVE-2021-3521
There is a flaw in RPM's signature functionality
Non notée
CVE-2021-3421
A flaw was found in the RPM package in the read functionality
Non notée