Vulnerability in openSUSE Factory
CVE-2021-25321
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
EPSS: 0.004 (36.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Opensuse Factory — versions arpwatch
- Opensuse Leap — versions 15.2
- Opensuse Leap 15.2 — versions arpwatch
- Suse Arpwatch
- Suse Linux_enterprise_server — versions 11
- Suse Manager_server — versions 4.0
- Suse Openstack_cloud_crowbar — versions 9.0
- Suse Linux Enterprise Server 11-sp4-ltss — versions arpwatch
- Suse Manager Server 4.0 — versions arpwatch
- Suse Openstack Cloud Crowbar 9 — versions arpwatch
Weakness classification (CWE)
References
- meissner@suse.de (x_refsource_CONFIRM, Exploit, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-25321?
- CVE-2021-25321 is a high-severity vulnerability in openSUSE Factory, classified under UNIX Symbolic Link (Symlink) Following. CVSS score: 7.8/10. Published 2021-06-30.
- How severe is CVE-2021-25321?
- High severity. CVSS v3 base score is 7.8 out of 10.