CVEvulnerability
CVE-2021-35939
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-08-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-59
Description
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected configurations
• rpm rpm (< 4.18)
• redhat enterprise linux 8.0
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://access.redhat.com/security/cve/CVE-2021-35939 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1964129 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556 Patch, Third Party Advisory
- https://github.com/rpm-software-management/rpm/pull/1919 Patch, Third Party Advisory
- https://rpm.org/wiki/Releases/4.18.0 Release Notes, Vendor Advisory
- https://security.gentoo.org/glsa/202210-22 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-35939 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1964129 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556 Patch, Third Party Advisory
- https://github.com/rpm-software-management/rpm/pull/1919 Patch, Third Party Advisory
- https://rpm.org/wiki/Releases/4.18.0 Release Notes, Vendor Advisory
- https://security.gentoo.org/glsa/202210-22 Third Party Advisory