Skip to main content

Rpm CVE-2017-7501

HIGH
Improper Link Resolution Before File Access (CWE-59)
2017-11-22 secalert@redhat.com
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 22, 2017 - 22:29 cve.org
HIGH 7.8

DescriptionCVE.org

It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.

AnalysisAI

It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-59. It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation. Affected products include: Rpm. Version information: before 4.13.0.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Rpm

View all
CVE-2019-3817 HIGH POC
8.8 Mar 27

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. Rated high

CVE-2024-1929 HIGH POC
8.4 May 08

Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Con

CVE-2014-8118 CRITICAL
10.0 Dec 16

Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in

CVE-2013-6435 HIGH
7.6 Dec 16

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose

CVE-2012-0815 MEDIUM
6.8 Jun 04

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service

CVE-2018-10897 HIGH
8.1 Aug 01

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote

CVE-2012-0061 MEDIUM
6.8 Jun 04

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-

CVE-2012-0060 MEDIUM
6.8 Jun 04

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (c

CVE-2021-3445 HIGH
7.5 May 19

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. Rated high severity (CVSS 7

CVE-2021-20271 HIGH
7.0 Mar 26

A flaw was found in RPM's signature check functionality when reading a package file. Rated high severity (CVSS 7.0), thi

CVE-2021-3421 MEDIUM
5.5 May 19

A flaw was found in the RPM package in the read functionality. Rated medium severity (CVSS 5.5), this vulnerability is n

CVE-2021-20266 MEDIUM
4.9 Apr 30

A flaw was found in RPM's hdrblobInit() in lib/header.c. Rated medium severity (CVSS 4.9), this vulnerability is remotel

Share

CVE-2017-7501 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy