GitHub Advisoryadvisory · Go

GHSA-3pqh-p72c-fj85 Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki

HIGH Published 2021-11-19 Modified 2025-01-29 Official page ↗
Aliases
CVE-2021-3978
Ecosystem
Go
Packages
github.com/cloudflare/cfrpki
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-269, CWE-281
Reviewed
2021-11-19

Affected packages

• Go github.com/cloudflare/cfrpki: < 1.4.2 → fixed in 1.4.2

Description

Impact When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root (https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation. For more information If you have any questions or comments about this advisory email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2021-3978 When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. vulnerability

Weakness · CWE (2)

  • CWE-269 Improper Privilege Management weakness
  • CWE-281 Improper Preservation of Permissions weakness

References