CVEvulnerability

CVE-2017-7496

7.0 HIGH Published 2017-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-391, CWE-755

Description

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

Affected configurations

• fedoraproject arm installer (<= 1.99.16)

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References