PT-2017-17774 · Red Hat+3 · Rpm+3

Publicado

2017-10-30

·

Atualizado

2022-11-29

·

CVE-2017-7501

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions rpm versions prior to 4.13.0.2
Description A security issue was discovered where rpm uses temporary files with predictable names during installation. This could allow an attacker with write access to the installation directory to create symbolic links to arbitrary locations, potentially modifying file content and permissions. This could lead to denial of service or possibly privilege escalation.
Recommendations For versions prior to 4.13.0.2, update to version 4.13.0.2 or later to resolve the issue.

Correção

DoS

Link Following

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

ALT-PU-2021-2518
ALT-PU-2021-2600
CVE-2017-7501
ECHO-6B80-EF11-AE2D
MGASA-2017-0394
OPENSUSE-SU-2018_3373-1
SUSE-SU-2018:3286-1
SUSE-SU-2018:3884-1
SUSE-SU-2018:3884-2

Produtos afetados

Alt Linux
Debian
Suse
Rpm